Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Numeric Errors Vulnerability - CVE-2008-2107 - Vulnerability Database
PHP

PHP Numeric Errors Vulnerability - CVE-2008-2107

High
Reference: CVE-2008-2107
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2008-2107
Title: PHP Numeric Errors Vulnerability
Overview:

The GENERATE_SEED macro in PHP 4.x before 4.4.8 and 5.x before 5.2.5 when running on 32-bit systems performs a multiplication using values that can produce a zero seed in rare circumstances which allows context-dependent attackers to predict subsequent values of the rand and mt_rand functions and possibly bypass protection mechanisms that rely on an unknown initial seed.