Vulnerability Database

289,784

Total vulnerabilities in the database

CVE-2006-4812

Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unserialize PHP function with a large value for the number of array elements, which triggers the overflow in the Zend Engine ecalloc function (Zend/zend_alloc.c).

  • Published: Oct 10, 2006
  • Updated: Apr 13, 2023
  • CVE: CVE-2006-4812
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 10
  • AV:N/AC:L/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
php / php 5.1.5 5.1.5.x
php / php 5.1.2 5.1.2.x
php / php 4.2.0 4.2.0.x
php / php 5.1.1 5.1.1.x
php / php 4.1.0 4.1.0.x
php / php 5.1.6 5.1.6.x
php / php 4.0.4 4.0.4.x
php / php 4.0.5 4.0.5.x
php / php 5.0-rc1 5.0-rc1.x
php / php 5.0.5 5.0.5.x
php / php 5.0.1 5.0.1.x
php / php 5.1.4 5.1.4.x
php / php 4.0.7-rc2 4.0.7-rc2.x
php / php 5.0.4 5.0.4.x
php / php 4.0.7-rc1 4.0.7-rc1.x
php / php 4.2.2 4.2.2.x
php / php 4.0.3-patch1 4.0.3-patch1.x
php / php 4.0.7 4.0.7.x
php / php 4.0.2 4.0.2.x
php / php 5.0-rc3 5.0-rc3.x
php / php 4.1.1 4.1.1.x
php / php 5.0.3 5.0.3.x
php / php 4.2.3 4.2.3.x
php / php 5.1.0 5.1.0.x
php / php 4.0.1-patch1 4.0.1-patch1.x
php / php 4.0 4.0.x
php / php 4.0.1-patch2 4.0.1-patch2.x
php / php 4.0.6 4.0.6.x
php / php 5.0-rc2 5.0-rc2.x
php / php 4.1.2 4.1.2.x
php / php 4.0.7-rc3 4.0.7-rc3.x
php / php 5.1.3 5.1.3.x
php / php 4.2.1 4.2.1.x
php / php 4.0.1 4.0.1.x
php / php 5.0.2 5.0.2.x
php / php 4.2 4.2.x
php / php 4.0.3 4.0.3.x
php / php 5.0.0 5.0.0.x