CVE-2012-0807

Stack-based buffer overflow in the suhosin_encrypt_single_cookie function in the transparent cookie-encryption feature in the Suhosin extension before 0.9.33…

published January 27, 2012

CVSS
—
EPSS
3%
Percentile
89.0
In the wild
Unconfirmed
What it is

Stack-based buffer overflow in the suhosin_encrypt_single_cookie function in the transparent cookie-encryption feature in the Suhosin extension before 0.9.33 for PHP, when suhosin.cookie.encrypt and suhosin.multiheader are enabled, might allow remote attackers to execute arbitrary code via a long string that is used in a Set-Cookie HTTP header.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03466 · 89.0th percentile
Published
2012-01-27T00:00Z
EPSS history
Timeline
  • 27 JAN 00:00Z
    Stack-based buffer overflow in the suhosin_encrypt_single_cookie function in the transparent cookie-encryption feature in the Suhosin extension before 0.9.33…
    cvelistv5