5
CVSSv2

CVE-2012-0789

Published: 14/02/2012 Updated: 09/01/2018
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

Memory leak in the timezone functionality in PHP prior to 5.3.9 allows remote malicious users to cause a denial of service (memory consumption) by triggering many strtotime function calls, which are not properly handled by the php_date_parse_tzfile cache.

Vulnerable Product Search on Vulmon Subscribe to Product

php php 5.2.15

php php 5.3.3

php php 5.2.9

php php 5.2.8

php php 5.2.1

php php 5.2.0

php php 5.0.5

php php 5.0.4

php php 5.0.3

php php 5.0.0

php php 5.3.5

php php 5.2.17

php php 5.3.0

php php 5.2.12

php php 5.2.5

php php 5.2.4

php php 5.1.4

php php 5.1.3

php php

php php 5.2.16

php php 5.3.4

php php 5.2.11

php php 5.2.10

php php 5.2.3

php php 5.2.2

php php 5.1.2

php php 5.1.1

php php 5.3.7

php php 5.3.6

php php 5.2.14

php php 5.3.2

php php 5.3.1

php php 5.2.7

php php 5.2.6

php php 5.1.6

php php 5.1.5

php php 5.0.2

php php 5.0.1

Vendor Advisories

Synopsis Moderate: php security update Type/Severity Security Advisory: Moderate Topic Updated php packages that fix multiple security issues are now availablefor Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnerability Scori ...
Synopsis Moderate: php security update Type/Severity Security Advisory: Moderate Topic Updated php packages that fix multiple security issues are now availablefor Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnerability Scori ...
Synopsis Moderate: php53 security update Type/Severity Security Advisory: Moderate Topic Updated php53 packages that fix multiple security issues are now availablefor Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnerability S ...

Exploits

source: wwwsecurityfocuscom/bid/52043/info PHP is prone to a remote denial-of-service vulnerability An attacker can exploit this issue to exhaust available memory, denying access to legitimate users PHP versions prior to 539 are vulnerable <?php while (true) { strtotime('Monday 00:00 Europe/Paris'); // Memory leak } ?> ...