CVE-2012-2376 Buffer overflow in the com_print_typeinfo function in PHP 5.4.3 and earlier on Windows allows remote attackers to execute arbitrary code via crafted arguments that trigger incorrect handling of COM ob...
HighCVSS 10.0
EPSS 19.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the com_print_typeinfo function in PHP 5.4.3 and earlier on Windows allows remote attackers to execute arbitrary code via crafted arguments that trigger incorrect handling of COM object VARIANT types, as exploited in the wild in May 2012.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP | <= 5.4.3 | No fix listed |
| PHP | = 1.0 | No fix listed |
| PHP | = 2.0 | No fix listed |
| PHP | = 2.0b10 | No fix listed |
| PHP | = 3.0 | No fix listed |
| PHP | = 3.0.1 | No fix listed |
| PHP | = 3.0.2 | No fix listed |
| PHP | = 3.0.3 | No fix listed |
| PHP | = 3.0.4 | No fix listed |
| PHP | = 3.0.5 | No fix listed |
| PHP | = 3.0.6 | No fix listed |
| PHP | = 3.0.7 | No fix listed |
| PHP | = 3.0.8 | No fix listed |
| PHP | = 3.0.9 | No fix listed |
| PHP | = 3.0.10 | No fix listed |
| PHP | = 3.0.11 | No fix listed |
| PHP | = 3.0.12 | No fix listed |
| PHP | = 3.0.13 | No fix listed |
| PHP | = 3.0.14 | No fix listed |
| PHP | = 3.0.15 | No fix listed |
| PHP | = 3.0.16 | No fix listed |
| PHP | = 3.0.17 | No fix listed |
| PHP | = 3.0.18 | No fix listed |
| PHP | = 4.0-beta_4_patch1 | No fix listed |
| PHP | = 4.0-beta1 | No fix listed |
Show 91 more
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP | = 4.0-beta2 | No fix listed |
| PHP | = 4.0-beta3 | No fix listed |
| PHP | = 4.0-beta4 | No fix listed |
| PHP | = 4.0.0 | No fix listed |
| PHP | = 4.0.1 | No fix listed |
| PHP | = 4.0.2 | No fix listed |
| PHP | = 4.0.3 | No fix listed |
| PHP | = 4.0.4 | No fix listed |
| PHP | = 4.0.5 | No fix listed |
| PHP | = 4.0.6 | No fix listed |
| PHP | = 4.0.7 | No fix listed |
| PHP | = 4.1.0 | No fix listed |
| PHP | = 4.1.1 | No fix listed |
| PHP | = 4.1.2 | No fix listed |
| PHP | = 4.2.0 | No fix listed |
| PHP | = 4.2.1 | No fix listed |
| PHP | = 4.2.2 | No fix listed |
| PHP | = 4.2.3 | No fix listed |
| PHP | = 4.3.0 | No fix listed |
| PHP | = 4.3.1 | No fix listed |
| PHP | = 4.3.2 | No fix listed |
| PHP | = 4.3.3 | No fix listed |
| PHP | = 4.3.4 | No fix listed |
| PHP | = 4.3.5 | No fix listed |
| PHP | = 4.3.6 | No fix listed |
| PHP | = 4.3.7 | No fix listed |
| PHP | = 4.3.8 | No fix listed |
| PHP | = 4.3.9 | No fix listed |
| PHP | = 4.3.10 | No fix listed |
| PHP | = 4.3.11 | No fix listed |
| PHP | = 4.4.0 | No fix listed |
| PHP | = 4.4.1 | No fix listed |
| PHP | = 4.4.2 | No fix listed |
| PHP | = 4.4.3 | No fix listed |
| PHP | = 4.4.4 | No fix listed |
| PHP | = 4.4.5 | No fix listed |
| PHP | = 4.4.6 | No fix listed |
| PHP | = 4.4.7 | No fix listed |
| PHP | = 4.4.8 | No fix listed |
| PHP | = 4.4.9 | No fix listed |
| PHP | = 5.0.0 | No fix listed |
| PHP | = 5.0.0-beta1 | No fix listed |
| PHP | = 5.0.0-beta2 | No fix listed |
| PHP | = 5.0.0-beta3 | No fix listed |
| PHP | = 5.0.0-beta4 | No fix listed |
| PHP | = 5.0.0-rc1 | No fix listed |
| PHP | = 5.0.0-rc2 | No fix listed |
| PHP | = 5.0.0-rc3 | No fix listed |
| PHP | = 5.0.1 | No fix listed |
| PHP | = 5.0.2 | No fix listed |
| PHP | = 5.0.3 | No fix listed |
| PHP | = 5.0.4 | No fix listed |
| PHP | = 5.0.5 | No fix listed |
| PHP | = 5.1.0 | No fix listed |
| PHP | = 5.1.1 | No fix listed |
| PHP | = 5.1.2 | No fix listed |
| PHP | = 5.1.3 | No fix listed |
| PHP | = 5.1.4 | No fix listed |
| PHP | = 5.1.5 | No fix listed |
| PHP | = 5.1.6 | No fix listed |
| PHP | = 5.2.0 | No fix listed |
| PHP | = 5.2.1 | No fix listed |
| PHP | = 5.2.2 | No fix listed |
| PHP | = 5.2.3 | No fix listed |
| PHP | = 5.2.4 | No fix listed |
| PHP | = 5.2.5 | No fix listed |
| PHP | = 5.2.6 | No fix listed |
| PHP | = 5.2.7 | No fix listed |
| PHP | = 5.2.8 | No fix listed |
| PHP | = 5.2.9 | No fix listed |
| PHP | = 5.2.10 | No fix listed |
| PHP | = 5.2.11 | No fix listed |
| PHP | = 5.2.12 | No fix listed |
| PHP | = 5.2.13 | No fix listed |
| PHP | = 5.2.14 | No fix listed |
| PHP | = 5.2.15 | No fix listed |
| PHP | = 5.2.16 | No fix listed |
| PHP | = 5.2.17 | No fix listed |
| PHP | = 5.3.0 | No fix listed |
| PHP | = 5.3.1 | No fix listed |
| PHP | = 5.3.2 | No fix listed |
| PHP | = 5.3.3 | No fix listed |
| PHP | = 5.3.4 | No fix listed |
| PHP | = 5.3.5 | No fix listed |
| PHP | = 5.3.6 | No fix listed |
| PHP | = 5.3.7 | No fix listed |
| PHP | = 5.3.8 | No fix listed |
| PHP | = 5.3.9 | No fix listed |
| PHP | = 5.4.0 | No fix listed |
| PHP | = 5.4.1 | No fix listed |
| PHP | = 5.4.2 | No fix listed |