CVE-2006-1549
LOW severity · CVSS 2.1 · CWE-399
2.1CVSS LOW
Summary
PHP 4.4.2 and 5.1.2 allows local users to cause a crash (segmentation fault) by defining and executing a recursive function. NOTE: it has been reported by a reliable third party that some later versions are also affected.
Impact & exploitability
Attack vectorLocal
Attack complexityLow
Privileges required—
User interaction—
Confidentiality impactNone
Integrity impactNone
Availability impact—
Exploit probability (EPSS)1%
AV:L/AC:L/Au:N/C:N/I:N/A:P
Affected products we track (1)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Additional information
- NVD record
- http://www.osvdb.org/24485
- http://www.php-security.org/MOPB/MOPB-02-2007.htmlAdvisory
- http://www.securityfocus.com/archive/1/430453/100/0/threaded
- http://www.securityfocus.com/archive/1/430598/100/0/threaded
- http://securityreason.com/achievement_securityalert/35Advisory
- http://securityreason.com/securityalert/2312Advisory
- http://securityreason.com/securityalert/676Advisory
- http://securitytracker.com/id?1015880Advisory