[ MDVSA-2009:090 ] php

[dude67]

_______________________________________________________________________

Package : php
Date : April 10, 2009
Affected: 2008.1, 2009.0
_______________________________________________________________________

Problem Description:

A vulnerability has been found and corrected in PHP:

The JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2.x
before 5.2.9 allows remote attackers to cause a denial of service
(segmentation fault) via a malformed string to the json_decode API
function (CVE-2009-1271).

The updated packages have been patched to correct these issues.
_______________________________________________________________________

References:

http://cve.mitre.org/cgi-bin/cvename.cg ... -2009-1271
_______________________________________________________________________