CVE-2012-0788
PHP <5.3.9 - DoS
Title source: llmDescription
The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature, which allows remote attackers to cause a denial of service (application crash) via a crafted application that uses a PDO driver for a fetch and then calls the session_start function, as demonstrated by a crash of the Apache HTTP Server.
Exploits (1)
References (6)
Scores
EPSS
0.0521
EPSS Percentile
90.0%
Details
CWE
CWE-20
Status
published
Products (38)
php/php
5.0.0 (8 CPE variants)
php/php
5.0.1
php/php
5.0.2
php/php
5.0.3
php/php
5.0.4
php/php
5.0.5
php/php
5.1.1
php/php
5.1.2
php/php
5.1.3
php/php
5.1.4
... and 28 more
Published
Feb 14, 2012
Tracked Since
Feb 18, 2026