Vulnerability Details : CVE-2006-4486

Integer overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit system, allows context-dependent attackers to bypass the memory_limit restriction.

Vulnerability category: Overflow

Published 2006-08-31 21:04:00

Updated 2018-10-30 16:25:36

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2006-4486

Probability of exploitation activity in the next 30 days: 3.95%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 91 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2006-4486

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
2.6	LOW	AV:N/AC:H/Au:N/C:N/I:P/A:N	4.9	2.9	[email protected]
Access Vector: Network Access Complexity: High Authentication: None Confidentiality Impact: None Integrity Impact: Partial Availability Impact: None

CWE ids for CVE-2006-4486

CWE-189

Assigned by: [email protected] (Primary)

References for CVE-2006-4486

Products affected by CVE-2006-4486

PHP » PHP » Version: 5.1.0
cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*
Matching versions
PHP » PHP » Version: 5.1.1
cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*
Matching versions
PHP » PHP » Version: 5.1.2
cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*
Matching versions
PHP » PHP » Version: 5.1.4
cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*
Matching versions
PHP » PHP » Version: 5.1.5
cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*
Matching versions