CVE-2011-1092
PHP < 5.3.6 - Denial of Service and Memory Disclosure via shmop_read Integer Overflow
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-1092. PoCs published by Jose Carlos Norte.
AI-analyzed exploit summary This exploit demonstrates an integer overflow vulnerability in PHP versions <=5.3.5, leading to a denial-of-service (DoS) condition by attempting to allocate an excessively large shared memory segment. The code checks for vulnerability by reading a large value from shared memory.
Description
Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (crash) and possibly read sensitive memory via a large third argument to the shmop_read function.
Exploits (1)
This exploit demonstrates an integer overflow vulnerability in PHP versions <=5.3.5, leading to a denial-of-service (DoS) condition by attempting to allocate an excessively large shared memory segment. The code checks for vulnerability by reading a large value from shared memory.