Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long string in (1) the domain parameter to the dgettext function, the message parameter to the (2) dcgettext or (3) gettext function, the msgid1 parameter to the (4) dngettext or (5) ngettext function, or (6) the classname parameter to the stream_wrapper_register function. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless this issue can be demonstrated for code execution.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP 多个拒绝服务漏洞
Vulnerability Description
PHP 5.2.5版本及其早期版本允许见机行事的攻击者借助(1)dgettext函数的domain参数,(2) dcgettext或(3) gettext函数的 message参数,(4) dngettext或(5) ngettext函数的msgid1参数，或(6) stream_wrapper_register函数的classname参数的一个超长的字符串造成拒绝服务(应用程序崩溃)。注意：这可能不是在大多数支持多线程的Web服务器环境存在的漏洞，除非这个问题能够出执行代码。
CVSS Information
N/A
Vulnerability Type
N/A