Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service (infinite loop) via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU registers, as demonstrated using 2.2250738585072011e-308.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP zend_strtod函数畸形浮点值数字错误漏洞
Vulnerability Description
PHP（PHP：Hypertext Preprocessor，PHP：超文本预处理器）是PHP Group和开放源代码社区共同维护的一种开源的通用计算机脚本语言。该语言主要用于Web开发，支持多种数据库及操作系统。 PHP 5.2.17之前的5.2版本以及5.3.5之前的5.3版本及其他产品的zend_strtod函数中使用的strtod.c中存在数字错误漏洞。上下文攻击者可借助科学计数法中的某个浮点数值(该数值没有在x87 FPU寄存器下得到正确处理)导致拒绝服务(无限循环)。
CVSS Information
N/A
Vulnerability Type
N/A