PHP "getSymbol()" Function Denial of Service

  Bookmark
 and Share

PHP is a general purpose scripting language that is suited for web development. PHP is exposed to a denial of service issue because it fails to perform adequate boundary checks on user-supplied data. The issue occurs in the "getSymbol()" function due to an integer overflow error. PHP versions prior to 5.3.3 revision 305571 are affected.

Ref: http://svn.php.net/viewvc?view=revision&revision=305571

10.50.15 - CVE: CVE-2010-4409
Platform: Cross Platform