CVE-2012-3450

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 11.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2012-08-06 · updated 2026-06-16

Description

pdo_sql_parser.re in the PDO extension in PHP before 5.3.14 and 5.4.x before 5.4.4 does not properly determine the end of the query string during parsing of prepared statements, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted parameter value.

Affected products

PHP: through 5.3.13; 5.3.0, 5.3.1, 5.3.2, 5.3.3, 5.3.4, 5.3.5 (+11)

References

http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00021.html
http://seclists.org/bugtraq/2012/Jun/60
http://www.debian.org/security/2012/dsa-2527
http://www.mandriva.com/security/advisories?name=MDVSA-2012:108
http://www.openwall.com/lists/oss-security/2012/08/02/3
http://www.openwall.com/lists/oss-security/2012/08/02/7
http://www.php.net/ChangeLog-5.php
http://www.ubuntu.com/usn/USN-1569-1
https://bugs.php.net/bug.php?id=61755
https://bugzilla.novell.com/show_bug.cgi?id=769785
http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00021.html
http://seclists.org/bugtraq/2012/Jun/60

Get alerted when CVE-2012-3450 or the next vulnerability affects your stack