CVE-2011-1464: Buffer Overflow

Q: What is the severity of CVE-2011-1464?

CVE-2011-1464 is considered to have a moderate severity as it could lead to a denial of service by crashing the application.

Q: How do I fix CVE-2011-1464?

To fix CVE-2011-1464, upgrade your PHP version to 5.3.6 or later, as earlier versions are affected by this vulnerability.

Q: What versions of PHP are affected by CVE-2011-1464?

CVE-2011-1464 affects PHP versions 3.0 through 5.3.5.

Q: What types of attacks are possible using CVE-2011-1464?

CVE-2011-1464 allows attackers to exploit a buffer overflow, potentially leading to application crashes.

Q: Is CVE-2011-1464 specific to any platforms?

CVE-2011-1464 is not platform-specific and affects multiple operating systems running the vulnerable versions of PHP.

Published Mar 20, 2011

Updated

Buffer overflow in the strval function in PHP before 5.3.6, when the precision configuration option has a large value, might allow context-dependent attackers to cause a denial of service (application crash) via a small numerical value in the argument.

Affected Software

110 affected components

PHP PHP=4.3.9

PHP PHP=4.4.9

PHP PHP=3.0

PHP PHP=5.2.9

PHP PHP=4.0-beta1

PHP PHP=3.0.5

PHP PHP=3.0.11

PHP PHP=5.2.4

PHP PHP=5.1.5

PHP PHP=5.1.2

PHP PHP=4.0-beta4

PHP PHP=5.3.1

PHP PHP=4.2.0

PHP PHP=5.1.1

PHP PHP=3.0.1

PHP PHP=5.2.14

PHP PHP=3.0.2

PHP PHP=4.4.4

PHP PHP=5.0.0-beta1

PHP PHP=4.1.0

PHP PHP=5.1.6

PHP PHP=5.2.16

PHP PHP=4.3.4

PHP PHP=4.0.4

PHP PHP=4.3.0

PHP PHP=4.0.5

PHP PHP=5.2.7

PHP PHP=5.2.2

PHP PHP=3.0.8

PHP PHP=5.0.5

PHP PHP=4.3.6

PHP PHP=3.0.13

PHP PHP=5.0.1

PHP PHP=5.1.4

PHP PHP=5.2.5

PHP PHP=4.3.7

PHP PHP=5.0.4

PHP PHP=4.2.2

PHP PHP=4.4.2

PHP PHP=5.2.12

PHP PHP=3.0.7

PHP PHP=4.3.2

PHP PHP=4.3.11

PHP PHP=4.0.0

PHP PHP=3.0.6

PHP PHP=3.0.17

PHP PHP=4.0.7

PHP PHP=4.0.2

PHP PHP=4.3.3

PHP PHP=2.0

PHP PHP=4.1.1

PHP PHP=3.0.15

PHP PHP=3.0.16

PHP PHP=5.2.11

PHP PHP=5.2.6

PHP PHP=5.2.17

PHP PHP=5.3.0

PHP PHP=4.4.3

PHP PHP=5.0.0-rc2

PHP PHP=5.2.3

PHP PHP=5.3.3

PHP PHP=5.0.3

PHP PHP=3.0.10

PHP PHP=3.0.4

PHP PHP=4.2.3

PHP PHP=5.1.0

PHP PHP=4.4.5

PHP PHP=5.2.13

PHP PHP=5.0.0-rc3

PHP PHP=4.0

PHP PHP=4.0-beta2

PHP PHP=2.0b10

PHP PHP=4.4.8

PHP PHP=4.0.6

PHP PHP=5.2.0

PHP PHP=5.2.4

PHP PHP=4.1.2

PHP PHP=5.0.0-beta3

PHP PHP=5.3.2

PHP PHP<=5.3.5

PHP PHP=5.3.4

PHP PHP=4.3.1

PHP PHP=5.1.3

PHP PHP=3.0.18

PHP PHP=4.0-beta_4_patch1

PHP PHP=4.4.0

PHP PHP=5.2.10

PHP PHP=4.3.10

PHP PHP=4.2.1

PHP PHP=5.0.0-rc1

PHP PHP=4.0.1

PHP PHP=1.0

PHP PHP=5.0.2

PHP PHP=4.4.6

PHP PHP=3.0.12

PHP PHP=5.2.15

PHP PHP=4.4.1

PHP PHP=4.0-beta3

PHP PHP=5.2.1

PHP PHP=4.0.3

PHP PHP=3.0.14

PHP PHP=3.0.9

PHP PHP=3.0.3

PHP PHP=5.0.0-beta4

PHP PHP=5.0.0

PHP PHP=4.3.8

PHP PHP=4.3.5

PHP PHP=5.0.0-beta2

PHP PHP=5.2.8

PHP PHP=4.4.7

Event History

Mar 20, 2011

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2011-1464?

CVE-2011-1464 is considered to have a moderate severity as it could lead to a denial of service by crashing the application.

How do I fix CVE-2011-1464?

To fix CVE-2011-1464, upgrade your PHP version to 5.3.6 or later, as earlier versions are affected by this vulnerability.

What versions of PHP are affected by CVE-2011-1464?