CVE-2012-0807
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.5%
Stack-based buffer overflow in the suhosin_encrypt_single_cookie function in the transparent cookie-encryption feature in the Suhosin extension before 0.9.33 for PHP, when suhosin.cookie.encrypt and suhosin.multiheader are enabled, might allow remote attackers to execute arbitrary code via a long string that is used in a Set-Cookie HTTP header.
Produtos afetados
n/a · n/aReferências
http://archives.neohapsis.com/archives/fulldisclosure/2012-01/0296.htmlhttp://lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.htmlhttp://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.htmlhttp://lists.opensuse.org/opensuse-security-announce/2012-04/msg00001.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=783350http://secunia.com/advisories/48668https://github.com/stefanesser/suhosin/commit/73b1968ee30f6d9d2dae497544b910e68e114bfahttp://www.openwall.com/lists/oss-security/2012/01/24/11http://www.openwall.com/lists/oss-security/2012/01/24/7