ID:4415 - Exploit for Memory leak in PHP - CVE-2012-0789

 
Main Vulnerability Database Exploits ID:4415 - Exploit for Memory leak in PHP - CVE-2012-0789

ID:4415 - Exploit for Memory leak in PHP - CVE-2012-0789

Published: August 11, 2020


Vulnerability identifier: #VU44298
Vulnerability risk: Medium
CVE-ID: CVE-2012-0789
CWE-ID: CWE-401
Exploitation vector: Remote access
Vulnerable software:
PHP

Link to public exploit:


Vulnerability description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the timezone functionality in PHP before 5.3.9 allows remote attackers to cause a denial of service (memory consumption) by triggering many strtotime function calls, which are not properly handled by the php_date_parse_tzfile cache. A remote attacker can perform a denial of service attack.


Remediation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.