php: denial of service
| Package(s): | php | CVE #(s): | CVE-2007-4782 | ||||||||||||||||||||||||||||||||
| Created: | July 16, 2008 | Updated: | January 22, 2009 | ||||||||||||||||||||||||||||||||
| Description: | From the Red Hat advisory: It was discovered that PHP fnmatch() function did not restrict the length of the string argument. An attacker could use this flaw to crash the PHP interpreter where a script used fnmatch() on untrusted input data. (CVE-2007-4782) | ||||||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||||||