CVE-2012-0789

First published: Sat Jan 21 2012(Updated: )

<a href="https://bugs.php.net/bug.php?id=53502">https://bugs.php.net/bug.php?id=53502</a> [2010-12-08 21:04 UTC] jsheridan at tenable dot com Description: ------------ strtotime calls with a timezone embedded function correctly but continually use up memory. In a daemon program this becomes quickly fatal. Test script: --------------- <?php while (true) { strtotime('Monday 00:00 Europe/Paris'); // Memory leak } ?> <?php while (true) { date_default_timezone_set("Europe/Paris"); strtotime('Monday 00:00'); // No memory leak } ?> Expected result: ---------------- Memory usage should remain stable.

Credit: secalert@redhat.com

Affected Software	Affected Version	How to fix
PHP PHP	<=5.3.8
PHP PHP	=5.0.0
PHP PHP	=5.0.0-beta1
PHP PHP	=5.0.0-beta2
PHP PHP	=5.0.0-beta3
PHP PHP	=5.0.0-beta4
PHP PHP	=5.0.0-rc1
PHP PHP	=5.0.0-rc2
PHP PHP	=5.0.0-rc3
PHP PHP	=5.0.1
PHP PHP	=5.0.2
PHP PHP	=5.0.3
PHP PHP	=5.0.4
PHP PHP	=5.0.5
PHP PHP	=5.1.1
PHP PHP	=5.1.2
PHP PHP	=5.1.3
PHP PHP	=5.1.4
PHP PHP	=5.1.5
PHP PHP	=5.1.6
PHP PHP	=5.2.0
PHP PHP	=5.2.1
PHP PHP	=5.2.2
PHP PHP	=5.2.3
PHP PHP	=5.2.4
PHP PHP	=5.2.5
PHP PHP	=5.2.6
PHP PHP	=5.2.7
PHP PHP	=5.2.8
PHP PHP	=5.2.9
PHP PHP	=5.2.10
PHP PHP	=5.2.11
PHP PHP	=5.2.12
PHP PHP	=5.2.14
PHP PHP	=5.2.15
PHP PHP	=5.2.16
PHP PHP	=5.2.17
PHP PHP	=5.3.0
PHP PHP	=5.3.1
PHP PHP	=5.3.2
PHP PHP	=5.3.3
PHP PHP	=5.3.4
PHP PHP	=5.3.5
PHP PHP	=5.3.6
PHP PHP	=5.3.7
redhat/php	<5.3.9	5.3.9

CVE-2012-0789

Never miss a vulnerability like this again

Reference Links

Company

Resources

Contact