CVE-2006-1991: Medium severity PHP PHP vulnerability
Published Apr 24, 2006
·Updated
The substrcompare function in string.c in PHP 5.1.2 allows context-dependent attackers to cause a denial of service (memory access violation) via an out-of-bounds offset argument.
Affected Software
1 affected component
PHP PHP=5.1.2
Remediation
Patch Available
Event History
Apr 24, 2006
CVE Published
11:02 PM
Apr 25, 2006
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-1991?
CVE-2006-1991 is classified as a medium severity vulnerability due to its potential to cause a denial of service.
2
How do I fix CVE-2006-1991?
To fix CVE-2006-1991, upgrade to a later version of PHP that is not affected by this vulnerability.
3
What versions of PHP are affected by CVE-2006-1991?
CVE-2006-1991 specifically affects PHP version 5.1.2.
4
What kind of attack does CVE-2006-1991 facilitate?
CVE-2006-1991 allows context-dependent attackers to exploit the vulnerability to cause a memory access violation leading to denial of service.
5
Is CVE-2006-1991 a critical vulnerability?
No, CVE-2006-1991 is not classified as critical, but it still poses a risk that should be mitigated.