CVE-2011-0755

Integer overflow in the mt_rand function in PHP before 5.3.4 might make it easier for context-dependent attackers to predict the return values by leveraging a…

published February 2, 2011

CVSS
—
EPSS
2%
Percentile
79.8
In the wild
Unconfirmed
What it is

Integer overflow in the mt_rand function in PHP before 5.3.4 might make it easier for context-dependent attackers to predict the return values by leveraging a script's use of a large max parameter, as demonstrated by a value that exceeds mt_getrandmax.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01937 · 79.8th percentile
Published
2011-02-02T21:00Z
EPSS history
Timeline
  • 02 FEB 21:00Z
    Integer overflow in the mt_rand function in PHP before 5.3.4 might make it easier for context-dependent attackers to predict the return values by leveraging a…
    cvelistv5