The php_if_imap_mime_header_decode function in the IMAP functionality in PHP before 4.2.2 allows remote attackers to cause a denial of service (crash) via an e-mail header with a long To header.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Php | Php | 4.2 (including) | 4.2 (including) |
| Php | Php | 4.2.0 (including) | 4.2.0 (including) |
| Php | Php | 4.2.1 (including) | 4.2.1 (including) |
| Red Hat Enterprise Linux AS (Advanced Server) version 2.1 | RedHat | * | |
| Red Hat Enterprise Linux ES version 2.1 | RedHat | * | |
| Red Hat Enterprise Linux WS version 2.1 | RedHat | * | |
| Red Hat Linux Advanced Workstation 2.1 | RedHat | * |
References
- http://bugs.php.net/bug.php?id=15595
- http://secunia.com/advisories/21202
- http://www.redhat.com/support/errata/RHSA-2006-0567.html
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=175040
- http://bugs.php.net/bug.php?id=15595
- http://secunia.com/advisories/21202
- http://www.redhat.com/support/errata/RHSA-2006-0567.html
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=175040