Lucene search
Ubuntu.comUB:CVE-2006-4812HistoryOct 10, 2006 - 12:00 a.m.
CVE-2006-4812
2006-10-1000:00:00
ubuntu.com
ubuntu.com
14
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.58 Medium
EPSS
Percentile
97.7%
Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote
attackers to execute arbitrary code via an argument to the unserialize PHP
function with a large value for the number of array elements, which
triggers the overflow in the Zend Engine ecalloc function
(Zend/zend_alloc.c).
Related
freebsd
freebsd
php -- _ecalloc Integer Overflow Vulnerability
2006-09-30 00:00:00
cve
cve
CVE-2006-4812
2006-10-10 04:06:00
CVE-2006-4170
2006-10-10 12:07:00
nessus
nessus
PHP 4.x < 4.3.0 ZendEngine Integer Overflow
2012-01-11 00:00:00
FreeBSD : php -- _ecalloc Integer Overflow Vulnerability (e329550b-54f7-11db-a5ae-00508d6a62df)
2006-10-10 00:00:00
RHEL 2.1 : php (RHSA-2006:0708)
2006-10-10 00:00:00
openvas
openvas
FreeBSD Ports: php5
2008-09-04 00:00:00
Gentoo Security Advisory GLSA 200610-14 (php)
2008-09-24 00:00:00
FreeBSD Ports: php5
2008-09-04 00:00:00
gentoo
gentoo
PHP: Integer overflow
2006-10-30 00:00:00
securityvulns
securityvulns
[Full-disclosure] [ MDKSA-2006:180 ] - Updated php packages fix integer overflow vulnerability
2006-10-06 00:00:00
Advisory 09/2006: PHP unserialize() Array Creation Integer Overflow
2006-10-09 00:00:00
PHP integer overflow
2006-10-09 00:00:00
redhat
redhat
(RHSA-2006:0708) php security update
2006-10-05 00:00:00
(RHSA-2006:0688) php security update
2006-10-05 00:00:00
centos
centos
php security update
2006-10-09 01:04:12
suse
suse
remote code execution in php4,php5
2006-10-09 16:00:37
ubuntu
ubuntu
PHP vulnerabilities
2006-10-11 00:00:00
fedora
fedora
[SECURITY] Fedora Core 5 Update: php-5.1.6-1.4
2007-02-26 22:09:19
[SECURITY] Fedora Core 5 Update: php-5.1.6-1.5
2007-04-18 22:42:03
[SECURITY] Fedora Core 5 Update: php-5.1.6-1.6
2007-05-24 05:24:12
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.58 Medium
EPSS
Percentile
97.7%
Related for UB:CVE-2006-4812