CVE-2012-2329
PHP 5.4.x < 5.4.3 - Buffer Overflow via HTTP Request Header
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-2329.
PoCs published by Metasploit, Vincent Danen, juan vazquez, including Metasploit module exploits/windows/http/php_apache_request_headers_bof.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in PHP 5.4.x before 5.4.3 via the `apache_request_headers` function by sending a maliciously crafted HTTP header. It achieves remote code execution by overwriting the SEH handler and executing shellcode.
Description
Buffer overflow in the apache_request_headers function in sapi/cgi/cgi_main.c in PHP 5.4.x before 5.4.3 allows remote attackers to cause a denial of service (application crash) via a long string in the header of an HTTP request.
Exploits (2)
This Metasploit module exploits a stack-based buffer overflow in PHP 5.4.x before 5.4.3 via the `apache_request_headers` function by sending a maliciously crafted HTTP header. It achieves remote code execution by overwriting the SEH handler and executing shellcode.
This Metasploit module exploits a stack-based buffer overflow in PHP 5.4.x before 5.4.3 via insecure handling of HTTP headers in the CGI version. It targets Windows systems with a crafted HTTP request containing a malicious payload to achieve remote code execution.