Test ID:	1.3.6.1.4.1.25623.1.0.802670
Category:	Denial of Service
Title:	PHP pdo_sql_parser.re 'PDO' Extension DoS Vulnerability - Windows
Summary:	PHP is prone to a denial of service vulnerability.
Description:	Summary: PHP is prone to a denial of service vulnerability. Vulnerability Insight: The flaw is due to an error in the PDO extension in pdo_sql_parser.re file, which fails to determine the end of the query string during parsing of prepared statements. Vulnerability Impact: Successful exploitation could allow remote attackers to cause a denial of service condition. Affected Software/OS: PHP version before 5.3.14 and 5.4.x before 5.4.4 on Windows Solution: Update to PHP Version 5.3.14 or 5.4.4 or later. CVSS Score: 2.6 CVSS Vector: AV:N/AC:H/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-3450 20120610 [php<=5.4.3] Parsing Bug in PHP PDO prepared statements may lead to access violation http://seclists.org/bugtraq/2012/Jun/60 DSA-2527 http://www.debian.org/security/2012/dsa-2527 MDVSA-2012:108 http://www.mandriva.com/security/advisories?name=MDVSA-2012:108 SUSE-SU-2012:1033 http://lists.opensuse.org/opensuse-security-announce/2012-08/msg00021.html USN-1569-1 http://www.ubuntu.com/usn/USN-1569-1 [oss-security] 20120802 CVE Request: php5 pdo array overread/crash http://www.openwall.com/lists/oss-security/2012/08/02/3 [oss-security] 20120802 Re: CVE Request: php5 pdo array overread/crash http://www.openwall.com/lists/oss-security/2012/08/02/7 http://www.php.net/ChangeLog-5.php https://bugs.php.net/bug.php?id=61755 https://bugzilla.novell.com/show_bug.cgi?id=769785
Copyright	Copyright (C) 2012 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.