Php · Php · CVE-2012-3450
**Name of the Vulnerable Software and Affected Versions**
PHP versions prior to 5.3.14
PHP versions 5.4.x prior to 5.4.4
**Description**
The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and application crash, by providing a crafted parameter value in prepared statements.
**Recommendations**
For PHP versions prior to 5.3.14, update to version 5.3.14 or later.
For PHP versions 5.4.x prior to 5.4.4, update to version 5.4.4 or later.