Buffer overflow in Php

CVE-2013-2110

Heap-based buffer overflow in the php_quot_print_encode function in ext/standard/quot_print.c in PHP before 5.3.26 and 5.4.x before 5.4.16 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a crafted argument to the quoted_printable_encode function.

Vulnerability class: Buffer Overflow

EPSS: 0.067 (93.3th percentile) — read the EPSS interpretation.

Affected products

  • Php — versions 1.0, 2.0, 2.0b10
  • N/a — versions n/a

Weakness classification (CWE)

References