CVE-2006-4486: Integer Overflow
Published Aug 31, 2006
·Updated
Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to bypass the memorylimit restriction.
Affected Software
5 affected components
PHP PHP=5.1.5
PHP PHP=5.1.2
PHP PHP=5.1.1
PHP PHP=5.1.4
PHP PHP=5.1.0
Remediation
Patch Available
Event History
Aug 31, 2006
CVE Published
09:04 PM
Sep 1, 2006
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-4486?
CVE-2006-4486 is classified as a medium severity vulnerability due to the potential for memory limit bypass.
2
How do I fix CVE-2006-4486?
To fix CVE-2006-4486, upgrade PHP to version 5.1.6 or later.
3
What versions of PHP are affected by CVE-2006-4486?
CVE-2006-4486 affects PHP versions 5.1.0 through 5.1.5.
4
What impact does CVE-2006-4486 have on a system?
CVE-2006-4486 can allow context-dependent attackers to circumvent the memory_limit restriction on a 64-bit system.
5
Is CVE-2006-4486 exploitable remotely?
Yes, CVE-2006-4486 can be exploited by attackers who have access to the affected PHP application's environment.