CVE-2006-4812
Description
From CVE.org
Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unserialize PHP function with a large value for the number of array elements, which triggers the overflow in the Zend Engine ecalloc function (Zend/zend_alloc.c).
Statement
Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.
This issue did not affect the versions of php as shipped with Red Hat Enterprise Linux 3, and 4.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
