Every CVE Search/ Get API key

CVE-2006-4812

Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute...

10.0 HighPublic exploitFix available

Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unserialize PHP function with a large value for the number of array elements, which triggers the overflow in the Zend Engine ecalloc function (Zend/zend_alloc.c).

Exploit likelihood

20.7%Down 27.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unserialize PHP function with a large value for the number of array elements, which triggers the overflow in the Zend Engine ecalloc function (Zend/zend_alloc.c).

Record
CVE-2006-4812
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-94
Updated
2026-11-02
CVE List No score

Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unserialize PHP function with a large value for the number of array elements, which triggers the overflow in the Zend Engine ecalloc function (Zend/zend_alloc.c).

Record
CVE-2006-4812
Updated
2026-11-02
EUVDEUVD-2006-4799 No score

Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unserialize PHP function with a large value for the number of array elements, which triggers the overflow in the Zend Engine ecalloc function (Zend/zend_alloc.c).

Record
EUVD-2006-4799
Updated
2026-11-03
GitHub AdvisoriesGHSA-2g5f-835h-7qjr No score

Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute...

Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unserialize PHP function with a large value for the number of array elements, which triggers the overflow in the Zend Engine ecalloc function (Zend/zend_alloc.c).

Record
GHSA-2g5f-835h-7qjr
Weakness
CWE-94
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
php
Red Hat:rhel_application_stack:1
From an advisory covering 6 CVEs
 before 0:5.1.4-1.el4s1.4
0:5.1.4-1.el4s1.4
php-bcmath
Red Hat:rhel_application_stack:1
From an advisory covering 6 CVEs
 before 0:5.1.4-1.el4s1.4
0:5.1.4-1.el4s1.4
php-dba
Red Hat:rhel_application_stack:1
From an advisory covering 6 CVEs
 before 0:5.1.4-1.el4s1.4
0:5.1.4-1.el4s1.4
php-debuginfo
Red Hat:rhel_application_stack:1
From an advisory covering 6 CVEs
 before 0:5.1.4-1.el4s1.4
0:5.1.4-1.el4s1.4
php-devel
Red Hat:rhel_application_stack:1
From an advisory covering 6 CVEs
 before 0:5.1.4-1.el4s1.4
0:5.1.4-1.el4s1.4
php-gd
Red Hat:rhel_application_stack:1
From an advisory covering 6 CVEs
 before 0:5.1.4-1.el4s1.4
0:5.1.4-1.el4s1.4
php-imap
Red Hat:rhel_application_stack:1
From an advisory covering 6 CVEs
 before 0:5.1.4-1.el4s1.4
0:5.1.4-1.el4s1.4
php-ldap
Red Hat:rhel_application_stack:1
From an advisory covering 6 CVEs
 before 0:5.1.4-1.el4s1.4
0:5.1.4-1.el4s1.4
php-mbstring
Red Hat:rhel_application_stack:1
From an advisory covering 6 CVEs
 before 0:5.1.4-1.el4s1.4
0:5.1.4-1.el4s1.4
php-mysql
Red Hat:rhel_application_stack:1
From an advisory covering 6 CVEs
 before 0:5.1.4-1.el4s1.4
0:5.1.4-1.el4s1.4
Show 40 moreShow less
Affected packages
PackageAffectedFixed
php-ncurses
Red Hat:rhel_application_stack:1
From an advisory covering 6 CVEs
 before 0:5.1.4-1.el4s1.4
0:5.1.4-1.el4s1.4
php-odbc
Red Hat:rhel_application_stack:1
From an advisory covering 6 CVEs
 before 0:5.1.4-1.el4s1.4
0:5.1.4-1.el4s1.4
php-pdo
Red Hat:rhel_application_stack:1
From an advisory covering 6 CVEs
 before 0:5.1.4-1.el4s1.4
0:5.1.4-1.el4s1.4
php-pgsql
Red Hat:rhel_application_stack:1
From an advisory covering 6 CVEs
 before 0:5.1.4-1.el4s1.4
0:5.1.4-1.el4s1.4
php-snmp
Red Hat:rhel_application_stack:1
From an advisory covering 6 CVEs
 before 0:5.1.4-1.el4s1.4
0:5.1.4-1.el4s1.4
php-soap
Red Hat:rhel_application_stack:1
From an advisory covering 6 CVEs
 before 0:5.1.4-1.el4s1.4
0:5.1.4-1.el4s1.4
php-xml
Red Hat:rhel_application_stack:1
From an advisory covering 6 CVEs
 before 0:5.1.4-1.el4s1.4
0:5.1.4-1.el4s1.4
php-xmlrpc
Red Hat:rhel_application_stack:1
From an advisory covering 6 CVEs
 before 0:5.1.4-1.el4s1.4
0:5.1.4-1.el4s1.4
php
Red Hat:enterprise_linux:2.1::as
 before 0:4.1.2-2.12
0:4.1.2-2.12
php-devel
Red Hat:enterprise_linux:2.1::as
 before 0:4.1.2-2.12
0:4.1.2-2.12
php-imap
Red Hat:enterprise_linux:2.1::as
 before 0:4.1.2-2.12
0:4.1.2-2.12
php-ldap
Red Hat:enterprise_linux:2.1::as
 before 0:4.1.2-2.12
0:4.1.2-2.12
php-manual
Red Hat:enterprise_linux:2.1::as
 before 0:4.1.2-2.12
0:4.1.2-2.12
php-mysql
Red Hat:enterprise_linux:2.1::as
 before 0:4.1.2-2.12
0:4.1.2-2.12
php-odbc
Red Hat:enterprise_linux:2.1::as
 before 0:4.1.2-2.12
0:4.1.2-2.12
php-pgsql
Red Hat:enterprise_linux:2.1::as
 before 0:4.1.2-2.12
0:4.1.2-2.12
php
Red Hat:enterprise_linux:2.1::aw
 before 0:4.1.2-2.12
0:4.1.2-2.12
php-devel
Red Hat:enterprise_linux:2.1::aw
 before 0:4.1.2-2.12
0:4.1.2-2.12
php-imap
Red Hat:enterprise_linux:2.1::aw
 before 0:4.1.2-2.12
0:4.1.2-2.12
php-ldap
Red Hat:enterprise_linux:2.1::aw
 before 0:4.1.2-2.12
0:4.1.2-2.12
php-manual
Red Hat:enterprise_linux:2.1::aw
 before 0:4.1.2-2.12
0:4.1.2-2.12
php-mysql
Red Hat:enterprise_linux:2.1::aw
 before 0:4.1.2-2.12
0:4.1.2-2.12
php-odbc
Red Hat:enterprise_linux:2.1::aw
 before 0:4.1.2-2.12
0:4.1.2-2.12
php-pgsql
Red Hat:enterprise_linux:2.1::aw
 before 0:4.1.2-2.12
0:4.1.2-2.12
php
Red Hat:enterprise_linux:2.1::es
 before 0:4.1.2-2.12
0:4.1.2-2.12
php-devel
Red Hat:enterprise_linux:2.1::es
 before 0:4.1.2-2.12
0:4.1.2-2.12
php-imap
Red Hat:enterprise_linux:2.1::es
 before 0:4.1.2-2.12
0:4.1.2-2.12
php-ldap
Red Hat:enterprise_linux:2.1::es
 before 0:4.1.2-2.12
0:4.1.2-2.12
php-manual
Red Hat:enterprise_linux:2.1::es
 before 0:4.1.2-2.12
0:4.1.2-2.12
php-mysql
Red Hat:enterprise_linux:2.1::es
 before 0:4.1.2-2.12
0:4.1.2-2.12
php-odbc
Red Hat:enterprise_linux:2.1::es
 before 0:4.1.2-2.12
0:4.1.2-2.12
php-pgsql
Red Hat:enterprise_linux:2.1::es
 before 0:4.1.2-2.12
0:4.1.2-2.12
php
Red Hat:enterprise_linux:2.1::ws
 before 0:4.1.2-2.12
0:4.1.2-2.12
php-devel
Red Hat:enterprise_linux:2.1::ws
 before 0:4.1.2-2.12
0:4.1.2-2.12
php-imap
Red Hat:enterprise_linux:2.1::ws
 before 0:4.1.2-2.12
0:4.1.2-2.12
php-ldap
Red Hat:enterprise_linux:2.1::ws
 before 0:4.1.2-2.12
0:4.1.2-2.12
php-manual
Red Hat:enterprise_linux:2.1::ws
 before 0:4.1.2-2.12
0:4.1.2-2.12
php-mysql
Red Hat:enterprise_linux:2.1::ws
 before 0:4.1.2-2.12
0:4.1.2-2.12
php-odbc
Red Hat:enterprise_linux:2.1::ws
 before 0:4.1.2-2.12
0:4.1.2-2.12
php-pgsql
Red Hat:enterprise_linux:2.1::ws
 before 0:4.1.2-2.12
0:4.1.2-2.12

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBPHP 3 < 5 - ZendEngine ECalloc Integer Overflow2006-10-05

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-4812 is a high vulnerability (CVSS 10.0) in Php, published October 9, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 20.7%, the 97th percentile. Fixed in php 0:4.1.2-2.12.

References

Show 53 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open