Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Numeric Errors Vulnerability - CVE-2010-4645 - Vulnerability Database
PHP

PHP Numeric Errors Vulnerability - CVE-2010-4645

Medium
Reference: CVE-2010-4645
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2010-4645
Title: PHP Numeric Errors Vulnerability
Overview:

strtod.c as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5 and other products allows context-dependent attackers to cause a denial of service (infinite loop) via a certain floating-point value in scientific notation which is not properly handled in x87 FPU registers as demonstrated using 2.2250738585072011e-308.