Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable destruction routines.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP ZendEngine变量释放远程拒绝服务漏洞
Vulnerability Description
PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP没有对嵌套数组的深度强制任何过滤检查。由于变量注册是以迭代的方式执行的，因此PHP会接受任何深度，直到达到memory_limit。PHP数组的释放是以递归的方式执行的，因此在耗尽了栈极限的时候就会崩溃。攻击者可以利用上述问题以可控的方式导致PHP崩溃。
CVSS Information
N/A
Vulnerability Type
N/A