CVE-2006-7205: Medium severity PHP Group PHP vulnerability
Published May 24, 2007
·Updated
The arrayfill function in ext/standard/array.c in PHP 4.4.2 and 5.1.2 allows context-dependent attackers to cause a denial of service (memory consumption) via a large num value.
Affected Software
2 affected components
PHP Group PHP=4.4.2
PHP Group PHP=5.1.2
Event History
May 24, 2007
CVE Published
via MITRE·01:29 AM
Data Sourced
via MITRE·01:29 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-7205?
CVE-2006-7205 has a medium severity rating as it can lead to denial of service through excessive memory consumption.
2
How do I fix CVE-2006-7205?
To fix CVE-2006-7205, upgrade to a later version of PHP that does not exhibit this vulnerability.
3
What versions are affected by CVE-2006-7205?
CVE-2006-7205 affects PHP versions 4.4.2 and 5.1.2.
4
What type of attacks does CVE-2006-7205 enable?
CVE-2006-7205 allows context-dependent attackers to exploit the vulnerability for denial of service attacks.
5
What function is responsible for the vulnerability in CVE-2006-7205?
The vulnerability in CVE-2006-7205 is caused by the array_fill function in PHP.