OSVDB ID: 32762

Title: PHP on 64-bit zend_hash_init Function Remote DoS

Info

Disclosure

Feb 09, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

PHP contains a flaw that may all a context-dependent attacker to deny service. The issue occurs on 64-bit platforms when the zend_hash_init function unserializing certain expressions causing 32-bit arguments to be used after the check for a negative value. This may cause the application to enter an infinite loop and require a restart.

Classification

Location: Remote / Network Access, Context Dependent
Attack Type: Denial of Service
Impact: Loss of Availability
Disclosure: Vendor Verified

Solution

Unknown or Incomplete

Products

Unknown or Incomplete

References

Credit

Unknown or Incomplete



Direct URL: http://osvdb.org/32762