CVE-2012-3450
Php < 5.3.13 - Denial of Service
Title source: ruleDescription
pdo_sql_parser.re in the PDO extension in PHP before 5.3.14 and 5.4.x before 5.4.4 does not properly determine the end of the query string during parsing of prepared statements, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted parameter value.
Exploits (1)
References (10)
Scores
EPSS
0.1238
EPSS Percentile
93.9%
Details
Status
published
Products (18)
php/php
5.3.0
php/php
5.3.1
php/php
5.3.2
php/php
5.3.3
php/php
5.3.4
php/php
5.3.5
php/php
5.3.6
php/php
5.3.7
php/php
5.3.8
php/php
5.3.9
... and 8 more
Published
Aug 06, 2012
Tracked Since
Feb 18, 2026