Signature Detail
Short Name |
HTTP:PHP:SDNTOJEWISH-FUNC-OF |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
PHP SdnToJewish Function Integer Overflow |
Release Date |
2013/08/23 |
Update Number |
2293 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: PHP SdnToJewish Function Integer Overflow
This signature detects attempts to exploit a known vulnerability against PHP. A successful attack can lead to arbitrary code execution.
Extended Description
Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before 5.3.26 and 5.4.x before 5.4.16 allows context-dependent attackers to cause a denial of service (application hang) via a large argument to the jdtojewish function.
Affected Products
- php 1.0
- php 2.0
- php 2.0b10
- php 3.0
- php 3.0.1
- php 3.0.10
- php 3.0.11
- php 3.0.12
- php 3.0.13
- php 3.0.14
- php 3.0.15
- php 3.0.16
- php 3.0.17
- php 3.0.18
- php 3.0.2
- php 3.0.3
- php 3.0.4
- php 3.0.5
- php 3.0.6
- php 3.0.7
- php 3.0.8
- php 3.0.9
- php 4.0.0
- php 4.0.1
- php 4.0.2
- php 4.0.3
- php 4.0.4
- php 4.0.5
- php 4.0.6
- php 4.0.7
- php 4.0 (beta1)
- php 4.0 (beta2)
- php 4.0 (beta3)
- php 4.0 (beta4)
- php 4.0 (beta_4_patch1)
- php 4.1.0
- php 4.1.1
- php 4.1.2
- php 4.2.0
- php 4.2.1
- php 4.2.2
- php 4.2.3
- php 4.3.0
- php 4.3.1
- php 4.3.10
- php 4.3.11
- php 4.3.2
- php 4.3.3
- php 4.3.4
- php 4.3.5
- php 4.3.6
- php 4.3.7
- php 4.3.8
- php 4.3.9
- php 4.4.0
- php 4.4.1
- php 4.4.2
- php 4.4.3
- php 4.4.4
- php 4.4.5
- php 4.4.6
- php 4.4.7
- php 4.4.8
- php 4.4.9
- php 5.0.0 (beta1)
- php 5.0.0 (beta2)
- php 5.0.0 (beta3)
- php 5.0.0 (beta4)
- php 5.0.0 (rc1)
- php 5.0.0 (rc2)
- php 5.0.0 (rc3)
- php 5.0.1
- php 5.0.2
- php 5.0.3
- php 5.0.4
- php 5.0.5
- php 5.1.0
- php 5.1.1
- php 5.1.2
- php 5.1.3
- php 5.1.4
- php 5.1.5
- php 5.1.6
- php 5.2.0
- php 5.2.1
- php 5.2.10
- php 5.2.11
- php 5.2.12
- php 5.2.13
- php 5.2.14
- php 5.2.15
- php 5.2.16
- php 5.2.17
- php 5.2.2
- php 5.2.3
- php 5.2.4
- php 5.2.5
- php 5.2.6
- php 5.2.7
- php 5.2.8
- php 5.2.9
- php 5.3.0
- php 5.3.1
- php 5.3.10
- php 5.3.11
- php 5.3.12
- php 5.3.13
- php 5.3.14
- php 5.3.15
- php 5.3.16
- php 5.3.17
- php 5.3.18
- php 5.3.19
- php 5.3.2
- php 5.3.20
- php 5.3.21
- php 5.3.22
- php 5.3.23
- php 5.3.24
- php 5.3.3
- php 5.3.4
- php 5.3.5
- php 5.3.6
- php 5.3.7
- php 5.3.8
- php 5.3.9
- php 5.4.0
- php 5.4.1
- php 5.4.10
- php 5.4.11
- php 5.4.12
- php 5.4.13
- php 5.4.14
- php 5.4.15
- php 5.4.2
- php 5.4.3
- php 5.4.4
- php 5.4.5
- php 5.4.6
- php 5.4.7
- php 5.4.8
- php 5.4.9
- php up to 5.3.25
References
- CVE: CVE-2013-4635