Description
The php_if_imap_mime_header_decode function in the IMAP functionality in PHP before 4.2.2 allows remote attackers to cause a denial of service (crash) via an e-mail header with a long "To" header.
References (4)
Core 4
Core References
Exploit x_refsource_confirm
http://bugs.php.net/bug.php?id=15595
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/21202
Vendor Advisory vendor-advisory
x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2006-0567.html
Patch x_refsource_confirm
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=175040
Scores
EPSS
0.0090
EPSS Percentile
76.0%
Details
Status
published
Products (3)
php/php
4.2
php/php
4.2.0
php/php
4.2.1
Published
Dec 31, 2002
Tracked Since
Feb 18, 2026