Every CVE Search/ Get API key

CVE-2010-4645

strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and...

5.0 MediumPublic exploitFix available

CVE-2010-4645 is a medium vulnerability (CVSS 5.0) in Php, published January 11, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 15.1%, the 96th percentile. Fixed in php 0:5.3.2-6.el6_0.1.

strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service (infinite loop) via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU registers, as demonstrated using 2.2250738585072011e-308.

Exploit likelihood

15.1%Up 2.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service (infinite loop) via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU registers, as demonstrated using 2.2250738585072011e-308.

Record
CVE-2010-4645
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-189
Updated
2026-11-02
CVE List No score

strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service (infinite loop) via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU registers, as demonstrated using 2.2250738585072011e-308.

Record
CVE-2010-4645
Updated
2026-11-02
EUVDEUVD-2010-4610 0.0

strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service (infinite loop) via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU registers, as demonstrated using 2.2250738585072011e-308.

Record
EUVD-2010-4610
CVSS
0.0 NoneAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-03
GitHub AdvisoriesGHSA-89c3-82jr-pppj No score

strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and...

strtod.c, as used in the zend_strtod function in PHP 5.2 before 5.2.17 and 5.3 before 5.3.5, and other products, allows context-dependent attackers to cause a denial of service (infinite loop) via a certain floating-point value in scientific notation, which is not properly handled in x87 FPU registers, as demonstrated using 2.2250738585072011e-308.

Record
GHSA-89c3-82jr-pppj
Updated
2026-11-02
OSVopenSUSE-SU-2024:10290-1 No score

apache2-mod_php7-7.0.14-1.4 on GA media

These are all security issues fixed in the apache2-mod_php7-7.0.14-1.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10290-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10344-1 No score

apache2-mod_php5-5.6.28-1.1 on GA media

These are all security issues fixed in the apache2-mod_php5-5.6.28-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10344-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11169-1 No score

php8-8.0.11-1.1 on GA media

These are all security issues fixed in the php8-8.0.11-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11169-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
php
Red Hat:enterprise_linux:6::client
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-bcmath
Red Hat:enterprise_linux:6::client
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-cli
Red Hat:enterprise_linux:6::client
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-common
Red Hat:enterprise_linux:6::client
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-dba
Red Hat:enterprise_linux:6::client
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-debuginfo
Red Hat:enterprise_linux:6::client
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-devel
Red Hat:enterprise_linux:6::client
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-embedded
Red Hat:enterprise_linux:6::client
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-enchant
Red Hat:enterprise_linux:6::client
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-gd
Red Hat:enterprise_linux:6::client
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
Show 123 moreShow less
Affected packages
PackageAffectedFixed
php-imap
Red Hat:enterprise_linux:6::client
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-intl
Red Hat:enterprise_linux:6::client
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-ldap
Red Hat:enterprise_linux:6::client
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-mbstring
Red Hat:enterprise_linux:6::client
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-mysql
Red Hat:enterprise_linux:6::client
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-odbc
Red Hat:enterprise_linux:6::client
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-pdo
Red Hat:enterprise_linux:6::client
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-pgsql
Red Hat:enterprise_linux:6::client
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-process
Red Hat:enterprise_linux:6::client
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-pspell
Red Hat:enterprise_linux:6::client
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-recode
Red Hat:enterprise_linux:6::client
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-snmp
Red Hat:enterprise_linux:6::client
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-soap
Red Hat:enterprise_linux:6::client
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-tidy
Red Hat:enterprise_linux:6::client
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-xml
Red Hat:enterprise_linux:6::client
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-xmlrpc
Red Hat:enterprise_linux:6::client
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-zts
Red Hat:enterprise_linux:6::client
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php
Red Hat:enterprise_linux:6::computenode
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-bcmath
Red Hat:enterprise_linux:6::computenode
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-cli
Red Hat:enterprise_linux:6::computenode
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-common
Red Hat:enterprise_linux:6::computenode
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-dba
Red Hat:enterprise_linux:6::computenode
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-debuginfo
Red Hat:enterprise_linux:6::computenode
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-devel
Red Hat:enterprise_linux:6::computenode
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-embedded
Red Hat:enterprise_linux:6::computenode
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-enchant
Red Hat:enterprise_linux:6::computenode
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-gd
Red Hat:enterprise_linux:6::computenode
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-imap
Red Hat:enterprise_linux:6::computenode
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-intl
Red Hat:enterprise_linux:6::computenode
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-ldap
Red Hat:enterprise_linux:6::computenode
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-mbstring
Red Hat:enterprise_linux:6::computenode
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-mysql
Red Hat:enterprise_linux:6::computenode
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-odbc
Red Hat:enterprise_linux:6::computenode
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-pdo
Red Hat:enterprise_linux:6::computenode
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-pgsql
Red Hat:enterprise_linux:6::computenode
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-process
Red Hat:enterprise_linux:6::computenode
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-pspell
Red Hat:enterprise_linux:6::computenode
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-recode
Red Hat:enterprise_linux:6::computenode
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-snmp
Red Hat:enterprise_linux:6::computenode
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-soap
Red Hat:enterprise_linux:6::computenode
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-tidy
Red Hat:enterprise_linux:6::computenode
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-xml
Red Hat:enterprise_linux:6::computenode
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-xmlrpc
Red Hat:enterprise_linux:6::computenode
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-zts
Red Hat:enterprise_linux:6::computenode
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php
Red Hat:enterprise_linux:6::server
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-bcmath
Red Hat:enterprise_linux:6::server
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-dba
Red Hat:enterprise_linux:6::server
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-debuginfo
Red Hat:enterprise_linux:6::server
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-devel
Red Hat:enterprise_linux:6::server
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-embedded
Red Hat:enterprise_linux:6::server
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-enchant
Red Hat:enterprise_linux:6::server
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-imap
Red Hat:enterprise_linux:6::server
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-intl
Red Hat:enterprise_linux:6::server
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-mbstring
Red Hat:enterprise_linux:6::server
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-process
Red Hat:enterprise_linux:6::server
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-pspell
Red Hat:enterprise_linux:6::server
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-recode
Red Hat:enterprise_linux:6::server
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-snmp
Red Hat:enterprise_linux:6::server
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-tidy
Red Hat:enterprise_linux:6::server
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-zts
Red Hat:enterprise_linux:6::server
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-cli
Red Hat:enterprise_linux:6::server
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-common
Red Hat:enterprise_linux:6::server
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-gd
Red Hat:enterprise_linux:6::server
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-ldap
Red Hat:enterprise_linux:6::server
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-mysql
Red Hat:enterprise_linux:6::server
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-odbc
Red Hat:enterprise_linux:6::server
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-pdo
Red Hat:enterprise_linux:6::server
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-pgsql
Red Hat:enterprise_linux:6::server
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-soap
Red Hat:enterprise_linux:6::server
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-xml
Red Hat:enterprise_linux:6::server
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-xmlrpc
Red Hat:enterprise_linux:6::server
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php
Red Hat:enterprise_linux:6::workstation
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-bcmath
Red Hat:enterprise_linux:6::workstation
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-dba
Red Hat:enterprise_linux:6::workstation
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-debuginfo
Red Hat:enterprise_linux:6::workstation
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-devel
Red Hat:enterprise_linux:6::workstation
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-embedded
Red Hat:enterprise_linux:6::workstation
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-enchant
Red Hat:enterprise_linux:6::workstation
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-imap
Red Hat:enterprise_linux:6::workstation
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-intl
Red Hat:enterprise_linux:6::workstation
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-mbstring
Red Hat:enterprise_linux:6::workstation
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-process
Red Hat:enterprise_linux:6::workstation
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-pspell
Red Hat:enterprise_linux:6::workstation
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-recode
Red Hat:enterprise_linux:6::workstation
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-snmp
Red Hat:enterprise_linux:6::workstation
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-tidy
Red Hat:enterprise_linux:6::workstation
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-zts
Red Hat:enterprise_linux:6::workstation
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-cli
Red Hat:enterprise_linux:6::workstation
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-common
Red Hat:enterprise_linux:6::workstation
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-gd
Red Hat:enterprise_linux:6::workstation
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-ldap
Red Hat:enterprise_linux:6::workstation
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-mysql
Red Hat:enterprise_linux:6::workstation
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-odbc
Red Hat:enterprise_linux:6::workstation
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-pdo
Red Hat:enterprise_linux:6::workstation
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-pgsql
Red Hat:enterprise_linux:6::workstation
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-soap
Red Hat:enterprise_linux:6::workstation
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-xml
Red Hat:enterprise_linux:6::workstation
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-xmlrpc
Red Hat:enterprise_linux:6::workstation
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php53
Red Hat:enterprise_linux:5::server
before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-bcmath
Red Hat:enterprise_linux:5::server
before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-cli
Red Hat:enterprise_linux:5::server
before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-common
Red Hat:enterprise_linux:5::server
before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-dba
Red Hat:enterprise_linux:5::server
before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-debuginfo
Red Hat:enterprise_linux:5::server
before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-devel
Red Hat:enterprise_linux:5::server
before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-gd
Red Hat:enterprise_linux:5::server
before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-imap
Red Hat:enterprise_linux:5::server
before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-intl
Red Hat:enterprise_linux:5::server
before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-ldap
Red Hat:enterprise_linux:5::server
before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-mbstring
Red Hat:enterprise_linux:5::server
before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-mysql
Red Hat:enterprise_linux:5::server
before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-odbc
Red Hat:enterprise_linux:5::server
before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-pdo
Red Hat:enterprise_linux:5::server
before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-pgsql
Red Hat:enterprise_linux:5::server
before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-process
Red Hat:enterprise_linux:5::server
before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-pspell
Red Hat:enterprise_linux:5::server
before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-snmp
Red Hat:enterprise_linux:5::server
before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-soap
Red Hat:enterprise_linux:5::server
before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-xml
Red Hat:enterprise_linux:5::server
before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php53-xmlrpc
Red Hat:enterprise_linux:5::server
before 0:5.3.3-1.el5_6.1
0:5.3.3-1.el5_6.1
php7
openSUSE:Tumbleweed
before 7.0.14-1.4
7.0.14-1.4
php5
openSUSE:Tumbleweed
before 5.6.28-1.1
5.6.28-1.1
php8
openSUSE:Tumbleweed
before 8.0.11-1.1
8.0.11-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBPHP 5.3.2 - 'zend_strtod()' Floating-Point Value Denial of Service2011-01-03

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

References

Show 167 moreShow less
MoveEnter Open