Test ID:	1.3.6.1.4.1.25623.1.0.900872
Category:	Denial of Service
Title:	PHP 'tsrm_win32.c' Denial Of Service Vulnerability - Windows
Summary:	PHP is prone to a Denial of Service vulnerability.
Description:	Summary: PHP is prone to a Denial of Service vulnerability. Vulnerability Insight: An error occurs in popem 'API' function in TSRM/tsrm_win32.c, when running on certain Windows operating systems. It can be caused via a crafted 'e' or 'er' string in the second argument (aka mode), possibly related to the '_fdopen' function in the Microsoft C runtime library. Vulnerability Impact: Successful exploitation will allow attackers to cause Denial of Service in the victim's system. Affected Software/OS: PHP version prior to 5.2.11 on Windows. Solution: Update to version 5.2.11 or later. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3294 http://www.openwall.com/lists/oss-security/2009/09/20/1 http://www.openwall.com/lists/oss-security/2009/11/20/2 http://www.openwall.com/lists/oss-security/2009/11/20/3 http://news.php.net/php.announce/79 http://www.osvdb.org/58188
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.