CVE-2011-1464

Priority
Medium
Description
Buffer overflow in the strval function in PHP before 5.3.6, when the
precision configuration option has a large value, might allow
context-dependent attackers to cause a denial of service (application
crash) via a small numerical value in the argument.
References
Bugs
Assigned-to
sbeattie
Package
Source: php5 (LP Ubuntu Debian)
Upstream:released (5.3.6)
Patches:
Upstream:http://svn.php.net/viewvc?view=revision&revision=308525
More Information

Valid XHTML 1.0 Strict

Updated: 2015-07-29 20:39:33 UTC (commit 9756)