HTTP: PHP php_register_variable_ex Function Code Execution

This signature detects attempts to exploit a known vulnerability against PHP php_register_variable_ex Function. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the affected application.

Extended Description

PHP is prone to an arbitrary-code-execution vulnerability. An attacker could exploit this issue to execute arbitrary code in the context of the application. Failed exploits will result in a denial-of-service condition. This issue is introduced in the fix for CVE-2011-4885 (BID 51193). PHP 5.3.9 is vulnerable; other versions may also be affected.

Affected Products

Php php

References

BugTraq: 51830

CVE: CVE-2012-0830

Short Name

HTTP:PHP:REGISTER-VARIABLE-CE

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: PHP php_register_variable_ex Function Code Execution

Extended Description

Affected Products

References

Found a potential security threat?