Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-0754. PoCs published by strategma.
AI-analyzed exploit summary This exploit demonstrates a denial-of-service vulnerability in PHP by leveraging Unicode text operations that crash the webserver due to improper global scope handling. The provided code snippet triggers the issue by processing a Unicode string with specific characters.
Description
PHP 4.4.4, 5.1.6, and other versions, when running on Apache, allows local users to modify behavior of other sites hosted on the same web server by modifying the mbstring.func_overload setting within .htaccess, which causes this setting to be applied to other virtual hosts on the same server.
Exploits (1)
This exploit demonstrates a denial-of-service vulnerability in PHP by leveraging Unicode text operations that crash the webserver due to improper global scope handling. The provided code snippet triggers the issue by processing a Unicode string with specific characters.