CVE-2013-4635 Integer overflow in n/a
An integer overflow in the PHP Calendar component allows attackers to cause a denial of service via a large argument to the jdtojewish function.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2013-4635?
CVE-2013-4635 is a medium-severity vulnerability in Php Php, published on 21 Jun 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before 5.3.26 and 5.4.x before 5.4.16 allows context-dependent attackers to cause a denial of service (application hang) via a large argument to the jdtojewish function.
Weakness: CWE-189
Which versions are affected by CVE-2013-4635?
It affects 1 product.
Products include Php Php.
How do I fix CVE-2013-4635?
Upgrade to a fixed version.
Is CVE-2013-4635 being exploited?
There is no known exploitation of CVE-2013-4635 in the wild and no public exploit code.
Other vulnerabilities in Php Php
Sources
Also known as GHSA-mw77-m68p-3ffp.