CVE-2012-0807

Published: Jan 27, 2012Modified: Apr 29, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

Stack-based buffer overflow in the suhosin_encrypt_single_cookie function in the transparent cookie-encryption feature in the Suhosin extension before 0.9.33 for PHP, when suhosin.cookie.encrypt and suhosin.multiheader are enabled, might allow remote attackers to execute arbitrary code via a long string that is used in a Set-Cookie HTTP header.

Affected (38)

Products: Hardened Php: Suhosin

Hardened Php

1 product

Suhosin

Configuration A

38 vulnerable

Vulnerable Software	Affected Versions
Hardened Php Suhosin	Up to 0.9.31
Hardened Php Suhosin	All versions
Hardened Php Suhosin	All versions
Hardened Php Suhosin	Version 0.9.0
Hardened Php Suhosin	Version 0.9.10
Hardened Php Suhosin	Version 0.9.11
Hardened Php Suhosin	Version 0.9.12
Hardened Php Suhosin	Version 0.9.13
Hardened Php Suhosin	Version 0.9.14
Hardened Php Suhosin	Version 0.9.15
Hardened Php Suhosin	Version 0.9.16
Hardened Php Suhosin	Version 0.9.17
Hardened Php Suhosin	Version 0.9.18
Hardened Php Suhosin	Version 0.9.19
Hardened Php Suhosin	Version 0.9.1
Hardened Php Suhosin	Version 0.9.20
Hardened Php Suhosin	Version 0.9.21
Hardened Php Suhosin	Version 0.9.22
Hardened Php Suhosin	Version 0.9.23
Hardened Php Suhosin	Version 0.9.24
Hardened Php Suhosin	Version 0.9.25
Hardened Php Suhosin	Version 0.9.26
Hardened Php Suhosin	Version 0.9.27
Hardened Php Suhosin	Version 0.9.28
Hardened Php Suhosin	Version 0.9.29
Hardened Php Suhosin	Version 0.9.2
Hardened Php Suhosin	Version 0.9.30
Hardened Php Suhosin	Version 0.9.3
Hardened Php Suhosin	Version 0.9.4
Hardened Php Suhosin	Version 0.9.5
Hardened Php Suhosin	Version 0.9.6.1
Hardened Php Suhosin	Version 0.9.6.2
Hardened Php Suhosin	Version 0.9.6.3
Hardened Php Suhosin	Version 0.9.6
Hardened Php Suhosin	Version 0.9.7
Hardened Php Suhosin	Version 0.9.8
Hardened Php Suhosin	Version 0.9.9.1
Hardened Php Suhosin	Version 0.9.9