CVE-2011-0755
Integer overflow in the mt_rand function in PHP before 5.3.4 might make it easier for context-dependent attackers to predict the return values by leveraging a script's use of a large max parameter, as demonstrated by a value that exceeds mt_getrandmax.
- Score
- CVSS 2.0 5.0 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2011-02-02
- Last modified
- 2024-08-06
- Weaknesses
- CWE-189
Affected products
References
- http://bugs.php.net/46587
- http://www.php.net/ChangeLog-5.php
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65426
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12589
