CVE

Id
54032  
CVE No.
CVE-2012-0789  
Status
Candidate  
Description
Memory leak in the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a denial of service (memory consumption) by triggering many strtotime function calls, which are not properly handled by the php_date_parse_tzfile cache.  
Phase
Assigned (20120119)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
568412 54032 CVE-2012-0789 CONFIRM:http://www.php.net/ChangeLog-5.php#5.3.9  View
568413 54032 CVE-2012-0789 CONFIRM:https://bugs.php.net/bug.php?id=53502  View
568414 54032 CVE-2012-0789 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=783609  View
568415 54032 CVE-2012-0789 SUSE:openSUSE-SU-2012:0426  View
568416 54032 CVE-2012-0789 URL:http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html  View
568417 54032 CVE-2012-0789 SECUNIA:48668  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27404 JVNDB-2012-003111 Moodle の lib/moodlelib.php における暗号化による保護メカニズムを破られる脆弱性 Moodle の lib/moodlelib.php 内の rc4encrypt 関数は、nfgjeingjk のハードコーディングされたパスワードを使用しているため、暗号化による保護メカニズムを破られる脆弱性が存在します。 CVE-2012-0794 54032 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003111.html  View