Unrated severityNVD Advisory· Published Feb 6, 2012· Updated Jun 16, 2026
CVE-2012-0830
CVE-2012-0830
Description
The php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to execute arbitrary code via a request containing a large number of variables, related to improper handling of array variables. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4885.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- osv-coords3 versionspkg:rpm/opensuse/php5&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/php7&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/php8&distro=openSUSE%20Tumbleweed
< 5.6.28-1.1+ 2 more
- (no CPE)range: < 5.6.28-1.1
- (no CPE)range: < 7.0.14-1.4
- (no CPE)range: < 8.0.11-1.1
Patches
Vulnerability mechanics
References
23- thexploit.com/sec/critical-php-remote-vulnerability-introduced-in-fix-for-php-hashtable-collision-dos/nvdExploit
- www.securityfocus.com/bid/51830nvdExploit
- gist.github.com/1725489nvdExploit
- secunia.com/advisories/47806nvdVendor Advisory
- h20000.www2.hp.com/bizsupport/TechSupport/Document.jspnvd
- lists.apple.com/archives/security-announce/2012/May/msg00001.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2012-03/msg00013.htmlnvd
- lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.htmlnvd
- marc.infonvd
- openwall.com/lists/oss-security/2012/02/02/12nvd
- openwall.com/lists/oss-security/2012/02/03/1nvd
- rhn.redhat.com/errata/RHSA-2012-0092.htmlnvd
- secunia.com/advisories/47801nvd
- secunia.com/advisories/47813nvd
- secunia.com/advisories/48668nvd
- securitytracker.com/idnvd
- support.apple.com/kb/HT5281nvd
- svn.php.net/viewvcnvd
- www.debian.org/security/2012/dsa-2403nvd
- www.h-online.com/security/news/item/Critical-PHP-vulnerability-being-fixed-1427316.htmlnvd
- www.osvdb.org/78819nvd
- www.php.net/ChangeLog-5.phpnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/72911nvd
News mentions
0No linked articles in our index yet.