CVE-2006-4812

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 20.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-10-10 · updated 2026-06-16
Weakness: CWE-94

Description

Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unserialize PHP function with a large value for the number of array elements, which triggers the overflow in the Zend Engine ecalloc function (Zend/zend_alloc.c).

Affected products

PHP: 4.0, 4.0.1, 4.0.1-patch1, 4.0.1-patch2, 4.0.2, 4.0.3 (+32)

References

http://cvs.php.net/viewvc.cgi/ZendEngine2/zend_alloc.c?r1=1.161&r2=1.162
http://lists.suse.com/archive/suse-security-announce/2006-Oct/0002.html
http://rhn.redhat.com/errata/RHSA-2006-0688.html
http://rhn.redhat.com/errata/RHSA-2006-0708.html
http://secunia.com/advisories/22280
http://secunia.com/advisories/22281
http://secunia.com/advisories/22300
http://secunia.com/advisories/22331
http://secunia.com/advisories/22338
http://secunia.com/advisories/22533
http://secunia.com/advisories/22538
http://secunia.com/advisories/22650

Get alerted when CVE-2006-4812 or the next vulnerability affects your stack