CVE-2012-0781

Executive Summary

Informations
Name	CVE-2012-0781	First vendor Publication	2012-01-18
Vendor	Cve	Last vendor Modification	2012-06-27

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:P)
Cvss Base Score	5	Attack Range	Network
Cvss Impact Score	2.9	Attack Complexity	Low
Cvss Expoit Score	10	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

The tidy_diagnose function in PHP 5.3.8 might allow remote attackers to cause a denial of service (NULL pointer dereference and application crash) via crafted input to an application that attempts to perform Tidy::diagnose operations on invalid objects, a different vulnerability than CVE-2011-4153.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0781

CWE : Common Weakness Enumeration

id	Name
CWE-399	Resource Management Errors

CPE : Common Platform Enumeration

Type	Description	Count
Application	Php Php cpe:/a:php:php:5.3.8	1

Open Source Vulnerability Database (OSVDB)

id	Description
78571	PHP tidy_diagnose Function Tidy::diagnose Operation Remote doS

Internal Sources (Detail)

Source	Url
BUGTRAQ	http://archives.neohapsis.com/archives/bugtraq/2012-01/0092.html
EXPLOIT-DB	http://www.exploit-db.com/exploits/18370/
MISC	http://cxsecurity.com/research/103
SECUNIA	http://secunia.com/advisories/48668
SUSE	http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html