CVE-2009-1271: Medium severity php vulnerability
Published Apr 8, 2009
·Updated
The JSONparser function (ext/json/JSONparser.c) in PHP 5.2.x before 5.2.9 allows remote attackers to cause a denial of service (segmentation fault) via a malformed string to the jsondecode API function.
Affected Software
10 affected components
PHP PHP=5.2.4
PHP PHP=5.2.7
PHP PHP=5.2.2
PHP PHP=5.2.5
PHP PHP=5.2.6
PHP PHP=5.2.3
PHP PHP=5.2.0
PHP PHP=5.2.4
PHP PHP=5.2.1
PHP PHP=5.2.8
Event History
Apr 8, 2009
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-1271?
CVE-2009-1271 is classified as a denial of service vulnerability that leads to segmentation faults in affected PHP versions.
2
Which PHP versions are affected by CVE-2009-1271?
CVE-2009-1271 affects PHP versions 5.2.0 through 5.2.8, excluding 5.2.9 and later.
3
How do I fix CVE-2009-1271?
To fix CVE-2009-1271, upgrade PHP to version 5.2.9 or later to ensure the vulnerability is addressed.
4
What does CVE-2009-1271 impact?
CVE-2009-1271 impacts the json_decode API function in PHP, making it vulnerable to denial of service attacks.
5
Can CVE-2009-1271 be exploited remotely?
Yes, CVE-2009-1271 can be exploited remotely by sending a malformed string to the json_decode function.