CVE-2012-2376 | BDVDB-2026-50268 Detail

Description#

Buffer overflow in the com_print_typeinfo function in PHP 5.4.3 and earlier on Windows allows remote attackers to execute arbitrary code via crafted arguments that trigger incorrect handling of COM object VARIANT types, as exploited in the wild in May 2012.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://isc.sans.edu/diary.html?storyid=13255
https://exchange.xforce.ibmcloud.com/vulnerabilities/75778
http://www.exploit-db.com/exploits/18861/
https://bugzilla.redhat.com/show_bug.cgi?id=823464
http://openwall.com/lists/oss-security/2012/05/20/2
http://www.securitytracker.com/id?1027089

Exploit#

http://www.exploit-db.com/exploits/18861/

History#

Version 12012-05-21Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.