CVE-2012-0788
PHP < 5.3.9 - Denial of Service via PDORow and Session Interaction
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2012-0788. PoCs published by anonymous.
AI-analyzed exploit summary This exploit triggers a denial-of-service (DoS) in PHP by leveraging a session serialization issue with PDO_Mysql objects. The vulnerable code causes a crash when a PDO_Mysql statement is stored in a session using FETCH_LAZY mode.
Description
The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature, which allows remote attackers to cause a denial of service (application crash) via a crafted application that uses a PDO driver for a fetch and then calls the session_start function, as demonstrated by a crash of the Apache HTTP Server.
Exploits (1)
This exploit triggers a denial-of-service (DoS) in PHP by leveraging a session serialization issue with PDO_Mysql objects. The vulnerable code causes a crash when a PDO_Mysql statement is stored in a session using FETCH_LAZY mode.