Description
Integer overflow in the SdnToJewish function in jewish.c in the Calendar component in PHP before 5.3.26 and 5.4.x before 5.4.16 allows context-dependent attackers to cause a denial of service (application hang) via a large argument to the jdtojewish function.
References
- 1028699 vdb-entry
- 54104 third-party-advisory
- SUSE-SU-2013:1316 vendor-advisory
- USN-1905-1 vendor-advisory
- http://www.php.net/ChangeLog-5.php
- 20130624 CVE-2013-4635 SndToJewish / SdnToJewish function name mailing-list
- SUSE-SU-2013:1315 vendor-advisory
- SUSE-SU-2013:1285 vendor-advisory
- https://bugs.php.net/bug.php?id=64895