CVE-2012-0788

Published: Feb 14, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The PDORow implementation in PHP before 5.3.9 does not properly interact with the session feature, which allows remote attackers to cause a denial of service (application crash) via a crafted application that uses a PDO driver for a fetch and then calls the session_start function, as demonstrated by a crash of the Apache HTTP Server.

Affected (45)

Products: Php: Php

Php

1 product

Php

Configuration A

45 vulnerable

Vulnerable Software	Affected Versions
Php Php	Up to 5.3.8
Php Php	Version 5.0.0
Php Php	Version 5.0.0 beta1
Php Php	Version 5.0.0 beta2
Php Php	Version 5.0.0 beta3
Php Php	Version 5.0.0 beta4
Php Php	Version 5.0.0 rc1
Php Php	Version 5.0.0 rc2
Php Php	Version 5.0.0 rc3
Php Php	Version 5.0.1
Php Php	Version 5.0.2
Php Php	Version 5.0.3
Php Php	Version 5.0.4
Php Php	Version 5.0.5
Php Php	Version 5.1.1
Php Php	Version 5.1.2
Php Php	Version 5.1.3
Php Php	Version 5.1.4
Php Php	Version 5.1.5
Php Php	Version 5.1.6
Php Php	Version 5.2.0
Php Php	Version 5.2.10
Php Php	Version 5.2.11
Php Php	Version 5.2.12
Php Php	Version 5.2.14
Php Php	Version 5.2.15
Php Php	Version 5.2.16
Php Php	Version 5.2.17
Php Php	Version 5.2.1
Php Php	Version 5.2.2
Php Php	Version 5.2.3
Php Php	Version 5.2.4
Php Php	Version 5.2.5
Php Php	Version 5.2.6
Php Php	Version 5.2.7
Php Php	Version 5.2.8
Php Php	Version 5.2.9
Php Php	Version 5.3.0
Php Php	Version 5.3.1
Php Php	Version 5.3.2
Php Php	Version 5.3.3
Php Php	Version 5.3.4
Php Php	Version 5.3.5
Php Php	Version 5.3.6
Php Php	Version 5.3.7