NetSight
IP …
medium5.0Public exploit code

CVE-2012-0788

The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature, which allows remote attackers to cause a denial of service (…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature, which allows remote attackers to cause a denial of service (application crash) via a crafted application that uses a PDO driver for a fetch and then calls the session_start function, as demonstrated by a crash of the Apache HTTP Server.

Affected products

VendorProductAffected versions
PhpPhp
through 5.3.8
Versions 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4

Weakness classification

CWE-20

References