CVE-2006-7205

The array_fill function in ext/standard/array.c in PHP 4.4.2 and 5.1.2 allows context-dependent attackers to cause a denial of service (memory consumption) via a large num value.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2007-05-24

Last modified

2024-09-17

Affected products

• Php (Php Group)

References

• http://securitytracker.com/id?1015979
• http://www.infigo.hr/hr/in_focus/advisories/INFIGO-2006-04-02
• http://www.osvdb.org/24945