CVEs-PoC/2006/CVE-2006-4812.md

CVE-2006-4812

Description

Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unserialize PHP function with a large value for the number of array elements, which triggers the overflow in the Zend Engine ecalloc function (Zend/zend_alloc.c).

POC

Reference

• http://securityreason.com/securityalert/1691
• http://securityreason.com/securityalert/1691

Github

• https://github.com/mudongliang/LinuxFlaw
• https://github.com/oneoy/cve-