{"id":"CVE-2006-4812","state":"PUBLISHED","title":"Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unserialize PHP function with a large value for th","description":"Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unserialize PHP function with a large value for the number of array elements, which triggers the overflow in the Zend Engine ecalloc function (Zend/zend_alloc.c).","publishedAt":"2006-10-09T18:00:00.000Z","updatedAt":"2024-08-07T19:23:41.021Z","severity":null,"assigner":"redhat","products":["n/a n/a"],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":["http://secunia.com/advisories/22300","http://secunia.com/advisories/22650","http://securitytracker.com/id?1016984","http://secunia.com/advisories/22281","http://secunia.com/advisories/22338","http://www.securityfocus.com/bid/20349","http://www.securityfocus.com/archive/1/448953/100/0/threaded","http://www.gentoo.org/security/en/glsa/glsa-200610-14.xml","http://www.trustix.org/errata/2006/0055","http://rhn.redhat.com/errata/RHSA-2006-0688.html","http://www.ubuntu.com/usn/usn-362-1","http://rhn.redhat.com/errata/RHSA-2006-0708.html","http://secunia.com/advisories/22538","http://securityreason.com/securityalert/1691","http://www.hardened-php.net/advisory_092006.133.html","http://secunia.com/advisories/22533","http://www.hardened-php.net/files/CVE-2006-4812.patch","http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm","https://exchange.xforce.ibmcloud.com/vulnerabilities/29362","http://cvs.php.net/viewvc.cgi/ZendEngine2/zend_alloc.c?r1=1.161&r2=1.162","http://lists.suse.com/archive/suse-security-announce/2006-Oct/0002.html","http://www.securityfocus.com/archive/1/448014/100/0/threaded","http://secunia.com/advisories/22331","http://www.vupen.com/english/advisories/2006/3922","http://secunia.com/advisories/22280","http://support.avaya.com/elmodocs2/security/ASA-2006-234.htm"],"weaknesses":[],"ingestedAt":"2026-10-29T19:27:51.196Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2006/4xxx/CVE-2006-4812.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2006-4812","state":"PUBLISHED","datePublished":"2006-10-09T18:00:00.000Z","dateUpdated":"2024-08-07T19:23:41.021Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2006-09-15T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unserialize PHP function with a large value for the number of array elements, which triggers the overflow in the Zend Engine ecalloc function (Zend/zend_alloc.c)."}],"affected":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"http://secunia.com/advisories/22300","name":"22300","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/22650","name":"22650","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://securitytracker.com/id?1016984","name":"1016984","tags":["vdb-entry","x_refsource_SECTRACK"]},{"url":"http://secunia.com/advisories/22281","name":"22281","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://secunia.com/advisories/22338","name":"22338","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.securityfocus.com/bid/20349","name":"20349","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.securityfocus.com/archive/1/448953/100/0/threaded","name":"OpenPKG-SA-2006.023","tags":["vendor-advisory","x_refsource_OPENPKG"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200610-14.xml","name":"GLSA-200610-14","tags":["vendor-advisory","x_refsource_GENTOO"]},{"url":"http://www.trustix.org/errata/2006/0055","name":"2006-0055","tags":["vendor-advisory","x_refsource_TRUSTIX"]},{"url":"http://rhn.redhat.com/errata/RHSA-2006-0688.html","name":"RHSA-2006:0688","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://www.ubuntu.com/usn/usn-362-1","name":"USN-362-1","tags":["vendor-advisory","x_refsource_UBUNTU"]},{"url":"http://rhn.redhat.com/errata/RHSA-2006-0708.html","name":"RHSA-2006:0708","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://secunia.com/advisories/22538","name":"22538","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://securityreason.com/securityalert/1691","name":"1691","tags":["third-party-advisory","x_refsource_SREASON"]},{"url":"http://www.hardened-php.net/advisory_092006.133.html","tags":["x_refsource_MISC"]},{"url":"http://secunia.com/advisories/22533","name":"22533","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.hardened-php.net/files/CVE-2006-4812.patch","tags":["x_refsource_CONFIRM"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm","tags":["x_refsource_CONFIRM"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29362","name":"php-ecalloc-integer-overflow(29362)","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://cvs.php.net/viewvc.cgi/ZendEngine2/zend_alloc.c?r1=1.161&r2=1.162","tags":["x_refsource_CONFIRM"]},{"url":"http://lists.suse.com/archive/suse-security-announce/2006-Oct/0002.html","name":"SUSE-SA:2006:059","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"http://www.securityfocus.com/archive/1/448014/100/0/threaded","name":"20061009 Advisory 09/2006: PHP unserialize() Array Creation Integer Overflow","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://secunia.com/advisories/22331","name":"22331","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://www.vupen.com/english/advisories/2006/3922","name":"ADV-2006-3922","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://secunia.com/advisories/22280","name":"22280","tags":["third-party-advisory","x_refsource_SECUNIA"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-234.htm","tags":["x_refsource_CONFIRM"]}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"redhat","dateUpdated":"2018-10-17T20:57:01.000Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749"},"datePublic":"2006-10-05T00:00:00.000Z"},"adp":[{"title":"CVE Program Container","references":[{"url":"http://secunia.com/advisories/22300","name":"22300","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/22650","name":"22650","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://securitytracker.com/id?1016984","name":"1016984","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://secunia.com/advisories/22281","name":"22281","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://secunia.com/advisories/22338","name":"22338","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securityfocus.com/bid/20349","name":"20349","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/448953/100/0/threaded","name":"OpenPKG-SA-2006.023","tags":["vendor-advisory","x_refsource_OPENPKG","x_transferred"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200610-14.xml","name":"GLSA-200610-14","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"http://www.trustix.org/errata/2006/0055","name":"2006-0055","tags":["vendor-advisory","x_refsource_TRUSTIX","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2006-0688.html","name":"RHSA-2006:0688","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://www.ubuntu.com/usn/usn-362-1","name":"USN-362-1","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred"]},{"url":"http://rhn.redhat.com/errata/RHSA-2006-0708.html","name":"RHSA-2006:0708","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred"]},{"url":"http://secunia.com/advisories/22538","name":"22538","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://securityreason.com/securityalert/1691","name":"1691","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"http://www.hardened-php.net/advisory_092006.133.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"http://secunia.com/advisories/22533","name":"22533","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.hardened-php.net/files/CVE-2006-4812.patch","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/29362","name":"php-ecalloc-integer-overflow(29362)","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://cvs.php.net/viewvc.cgi/ZendEngine2/zend_alloc.c?r1=1.161&r2=1.162","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://lists.suse.com/archive/suse-security-announce/2006-Oct/0002.html","name":"SUSE-SA:2006:059","tags":["vendor-advisory","x_refsource_SUSE","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/448014/100/0/threaded","name":"20061009 Advisory 09/2006: PHP unserialize() Array Creation Integer Overflow","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://secunia.com/advisories/22331","name":"22331","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2006/3922","name":"ADV-2006-3922","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://secunia.com/advisories/22280","name":"22280","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://support.avaya.com/elmodocs2/security/ASA-2006-234.htm","tags":["x_refsource_CONFIRM","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-07T19:23:41.021Z"}}]}}}