CVE-2009-1271

Published: Apr 8, 2009Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2.x before 5.2.9 allows remote attackers to cause a denial of service (segmentation fault) via a malformed string to the json_decode API function.

Affected (10)

Products: Php: Php

1 product

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Php Php	Version 5.2.0
Php Php	Version 5.2.1
Php Php	Version 5.2.2
Php Php	Version 5.2.3
Php Php	Version 5.2.4
Php Php	Version 5.2.4
Php Php	Version 5.2.5
Php Php	Version 5.2.6
Php Php	Version 5.2.7
Php Php	Version 5.2.8

References (44)

http://cvs.php.net/viewvc.cgi/php-src/ext/json/JSON_parser.c?r1=1.1.2.14&r2=1.1.2.15

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html

Source: cve@mitre.org

http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html

Source: cve@mitre.org

http://secunia.com/advisories/34770

Source: cve@mitre.org

http://secunia.com/advisories/34830

Source: cve@mitre.org

http://secunia.com/advisories/34933

Source: cve@mitre.org

http://secunia.com/advisories/35003

Source: cve@mitre.org

http://secunia.com/advisories/35007

Source: cve@mitre.org

http://secunia.com/advisories/35306

Source: cve@mitre.org

http://secunia.com/advisories/35685

Source: cve@mitre.org

http://secunia.com/advisories/36701

Source: cve@mitre.org

http://support.apple.com/kb/HT3865

Source: cve@mitre.org

http://www.debian.org/security/2009/dsa-1775

Source: cve@mitre.org

http://www.debian.org/security/2009/dsa-1789

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2009:090

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2009/04/01/9

Source: cve@mitre.org

http://www.php.net/releases/5_2_9.php

Source: cve@mitre.org

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2009-0350.html

Source: cve@mitre.org

http://www.ubuntu.com/usn/USN-761-2

Source: cve@mitre.org

https://usn.ubuntu.com/761-1/

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html

Source: cve@mitre.org

http://cvs.php.net/viewvc.cgi/php-src/ext/json/JSON_parser.c?r1=1.1.2.14&r2=1.1.2.15

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2009/Sep/msg00004.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2009-07/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34770

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34830

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/34933

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/35003

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/35007

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/35306

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/35685

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/36701

Source: af854a3a-2127-422b-91ae-364da2661108

http://support.apple.com/kb/HT3865

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2009/dsa-1775

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2009/dsa-1789

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2009:090

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2009/04/01/9

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.php.net/releases/5_2_9.php

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2009-0350.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-761-2

Source: af854a3a-2127-422b-91ae-364da2661108

https://usn.ubuntu.com/761-1/

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01451.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2009-May/msg01465.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.