CVE-2011-1092
Quick assessment
Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
PHP（PHP：Hypertext Preprocessor，PHP：超文本预处理器）是PHP Group和开放源代码社区共同维护的一种开源的通用计算机脚本语言。该语言主要用于Web开发，支持多种数据库及操作系统。 PHP的ext/shmop/shmop.c中d的"shmop_read()"函数在实现上存在远程整数溢出漏洞，远程攻击者可利用此漏洞在受影响网络服务器中执行任意代码，造成拒绝服务（崩溃）并可能读取敏感内存信息。
Public Exploits 1
ExploitDB · 1
EDB-16966 [dos]
Possible ATT&CK Techniques 1 AI
T1059 · Command and Scripting Interpreter
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2011-1092
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (crash) and possibly read sensitive memory via a large third argument to the shmop_read function.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
PHP 'shmop_read()'整数溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PHP（PHP：Hypertext Preprocessor，PHP：超文本预处理器）是PHP Group和开放源代码社区共同维护的一种开源的通用计算机脚本语言。该语言主要用于Web开发，支持多种数据库及操作系统。 PHP的ext/shmop/shmop.c中d的"shmop_read()"函数在实现上存在远程整数溢出漏洞，远程攻击者可利用此漏洞在受影响网络服务器中执行任意代码，造成拒绝服务（崩溃）并可能读取敏感内存信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2011-1092
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2011-1092
请登录查看更多情报信息。
Vendor Advisories for CVE-2011-1092 (7)
-
http://support.apple.com/kb/HT5002 x_refsource_CONFIRM
-
https://bugzilla.redhat.com/show_bug.cgi?id=683183 x_refsource_CONFIRM
-
-
-
http://www.mandriva.com/security/advisories?name=MDVSA-2011:053 vendor-advisory x_refsource_MANDRIVA
-
http://www.mandriva.com/security/advisories?name=MDVSA-2011:052 vendor-advisory x_refsource_MANDRIVA
-
Exploits & Public PoCs for CVE-2011-1092 (1)
Mailing List Discussions for CVE-2011-1092 (4)
-
🔗 '[security bulletin] HPSBOV02763 SSRT100826 rev.1 - HP Secure Web Server (SWS) for OpenVMS running PH' - MARC Read full article vendor-advisory x_refsource_HP
-
http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html vendor-advisory x_refsource_APPLE
-
-
Other References for CVE-2011-1092 (6)
-
http://www.php.net/archive/2011.php x_refsource_CONFIRM
-
http://www.php.net/ChangeLog-5.php x_refsource_CONFIRM
-
http://bugs.php.net/bug.php?id=54193 x_refsource_CONFIRM
-
http://www.php.net/releases/5_3_6.php x_refsource_CONFIRM
-
Same Patch Batch · n/a · 2011-03-15 · 11 CVEs total
| CVE-2010-4757 | e107 submitnews.php跨站脚本攻击漏洞 | |
| CVE-2011-0001 | Open-iSCSI targetcli-fb 资源管理错误漏洞 | |
| CVE-2011-0063 | Majordomo 2 lib/Majordomo.pm _list_file_get函数路径遍历漏洞 | |
| CVE-2011-0438 | Arthur de Jong nss-pam-ldapd nslcd/pam.c认证绕过漏洞 | |
| CVE-2011-0457 | e107跨站脚本攻击漏洞 | |
| CVE-2011-0609 | Adobe Flash Player/Reader/Acrobat SWF文件内存破坏漏洞 | |
| CVE-2011-0695 | Linux kernel InfiniBand驱动程序cm_work_handler函数竞争条件漏洞 | |
| CVE-2011-1146 | Red Hat libvirt API libvirt.c拒绝服务漏洞 | |
| CVE-2011-1147 | Digium Asterisk UDPTL缓冲区溢出漏洞 | |
| CVE-2011-1427 | Kodak InSite多个跨站脚本攻击漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2011-1092
No comments yet