Stack consumption vulnerability in the filter_var function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FILTER_VALIDATE_EMAIL mode is used, allows remote attackers to cause a denial of service (memory consumption and application crash) via a long e-mail address string.
2010-10-25T20:01:03.877
2025-04-11T00:51:21.963
Deferred
CVSSv2: 4.3 (MEDIUM)
AV:N/AC:M/Au:N/C:N/I:N/A:P
8.6
2.9
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | php | php | 5.2.0 | Yes |
| Application | php | php | 5.2.1 | Yes |
| Application | php | php | 5.2.2 | Yes |
| Application | php | php | 5.2.3 | Yes |
| Application | php | php | 5.2.4 | Yes |
| Application | php | php | 5.2.5 | Yes |
| Application | php | php | 5.2.6 | Yes |
| Application | php | php | 5.2.7 | Yes |
| Application | php | php | 5.2.8 | Yes |
| Application | php | php | 5.2.9 | Yes |
| Application | php | php | 5.2.10 | Yes |
| Application | php | php | 5.2.11 | Yes |
| Application | php | php | 5.2.12 | Yes |
| Application | php | php | 5.2.13 | Yes |
| Application | php | php | 5.2.14 | Yes |
| Application | php | php | 5.3.0 | Yes |
| Application | php | php | 5.3.1 | Yes |
| Application | php | php | 5.3.2 | Yes |
| Application | php | php | 5.3.3 | Yes |