Vulnerability in PHP

CVE-2006-1991

The substr_compare function in string.c in PHP 5.1.2 allows context-dependent attackers to cause a denial of service (memory access violation) via an out-of-bounds offset argument.

EPSS: 0.022 (80.5th percentile) — read the EPSS interpretation.

Affected products

  • Php — versions 5.1.2
  • N/a — versions n/a

Weakness classification (CWE)

References