The array_fill function in ext/standard/array.c in PHP 4.4.2 and 5.1.2 allows context-dependent attackers to cause a denial of service (memory consumption) via a large num value.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Php | Php_group | 4.4.2 (including) | 4.4.2 (including) |
| Php | Php_group | 5.1.2 (including) | 5.1.2 (including) |
| Php4 | Ubuntu | dapper | * |
| Php4 | Ubuntu | edgy | * |