Description
The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable destruction routines.
Remediation
References
Related Vulnerabilities
Internet Information Services Other Vulnerability (CVE-1999-0412)
WordPress Plugin FormCraft-Contact Form Builder Cross-Site Request Forgery (1.2.1)
Joomla! Core 1.0.x Multiple Vulnerabilities (1.0.0 - 1.0.3)
Joomla! Core 4.x.x Multiple Vulnerabilities (4.0.0 - 4.2.6)
Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2020-10705)