Description

The substr_compare function in string.c in PHP 5.1.2 allows context-dependent attackers to cause a denial of service (memory access violation) via an out-of-bounds offset argument.

Remediation

References

CVE-2006-1991

Related Vulnerabilities

WordPress Plugin Comment Extra Fields Multiple Cross-Site Scripting Vulnerabilities (1.7)

Internet Information Services Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2010-1256)

Oracle Database Server CVE-2013-3790 Vulnerability (CVE-2013-3790)

MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3759)

WordPress Plugin Active Directory Integration/LDAP Integration Cross-Site Scripting (3.6.94)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2006-1991