PT-2006-5575 · Php+1 · Php+1

Stefan Esser · Published 2006-10-09 · Updated 2018-10-30 · CVE-2006-4812

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PHP versions 4 before 4.3.0 PHP versions 5 up to 5.1.6

Description The issue is related to an integer overflow that allows remote attackers to execute arbitrary code. This is achieved by providing a large value for the number of array elements to the unserialize PHP function, which triggers the overflow in the Zend Engine ecalloc function.

Recommendations For PHP versions 4 before 4.3.0, update to version 4.3.0 or later to resolve the issue. For PHP versions 5 up to 5.1.6, update to a version later than 5.1.6 to resolve the issue.

Exploit

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2006-4812

RHSA-2006:0688

RHSA-2006:0708

Affected Products

Php

Zend Engine

References · 31

• 🔥 https://exploit-db.com/exploits/28760 · Exploit
• http://securitytracker.com/id?1016984 · Patch
• http://gentoo.org/security/en/glsa/glsa-200610-14.xml · Vendor Advisory
• http://hardened-php.net/advisory_092006.133.html · Vendor Advisory
• http://securityfocus.com/archive/1/448953/100/0/threaded · Vendor Advisory
• http://secunia.com/advisories/22280 · Vendor Advisory
• http://lists.suse.com/archive/suse-security-announce/2006-Oct/0002.html · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2006-0688.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-4812 · Security Note
• http://ubuntu.com/usn/usn-362-1 · Vendor Advisory
• http://hardened-php.net/files/CVE-2006-4812.patch · Patch
• http://trustix.org/errata/2006/0055 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2006-0708.html · Vendor Advisory
• http://secunia.com/advisories/22533 · Note
• http://cvs.php.net/viewvc.cgi/ZendEngine2/zend_alloc.c?r1=1.161&r2=1.162 · Note