CVE-2012-0830PHP Memory Corruption
php: remote code exec flaw introduced in the CVE-2011-4885 hashdos fix
Published Feb 2, 2012 · Updated Mar 9, 2026 · Also known as DEBIAN-CVE-2012-0830, DSA-2403-1
Key Facts
Patch immediately- CVE-2012-0830 is a high-severity vulnerability (CVSS 7.5 v2) affecting PHP, php5 (debian), php-bcmath (amazon) and 22 more products.
- It is not listed in any known-exploited vulnerabilities catalog. Public exploit code is available.
- EPSS estimates a 30% probability of exploitation in the next 30 days.
- Fixed versions are available, including apache2-mod_php5 5.6.28-1.1, apache2-mod_php7 7.0.14-1.4, PHP 0:4.3.9-3.36.
- Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.
Scores
CVSS v2
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS (30-day exploit likelihood)
30%
Higher than 98.1% of all scored CVEs
Exploit maturity
Proof of concept
ATLAS score
43/100
Publication score, see How it works
Exploitation Verdict
KEV listed
Not listed
Federal due date
None
No federal due date
Ransomware use
Not reported
Attributed actors
None named
Exploit & Defence Guidance
Exploit maturity
Proof of concept
Public exploit code
2
Proof-of-concept links
In-the-wild evidence
2
Reports of active use
Advisories And Exploit References
- advisoryRHSA-2012:0092
- advisoryRHSA-2012:0093
- advisory47806
Description
The php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to execute arbitrary code via a request containing a large number of variables, related to improper handling of array variables. NOTE: this vulnerability exists because of an incorrect fix for CVE-2011-4885.
Affected Products
270 affected entries in total| Product | Affected versions | Fixed in |
|---|---|---|
| PHPPHP | 5.3.9 | 5.3.10-1.15.amzn1 |
| php5debian | See advisory | 5.3.3-7+squeeze7 |
| php-bcmathamazon | See advisory | 5.3.10-1.15.amzn1 |
| php-cliamazon | See advisory | 5.3.10-1.15.amzn1 |
| php-commonamazon | See advisory | 5.3.10-1.15.amzn1 |
Patched Releases
apache2-mod_php5
5.6.28-1.1
apache2-mod_php7
7.0.14-1.4
PHP
0:4.3.9-3.36, 0:5.1.6-27.el5_7.5, 0:5.3.3-3.el6_2.6, 5.1.6-27.el5_7.5, 5.3.10-1.15.amzn1, 5.3.3-3.el6_2.6
php-bcmath
5.1.6-27.el5_7.5, 5.3.10-1.15.amzn1, 5.3.3-3.el6_2.6
php-cli
5.1.6-27.el5_7.5, 5.3.10-1.15.amzn1, 5.3.3-3.el6_2.6
php-common
5.1.6-27.el5_7.5, 5.3.10-1.15.amzn1, 5.3.3-3.el6_2.6
php-dba
5.1.6-27.el5_7.5, 5.3.10-1.15.amzn1, 5.3.3-3.el6_2.6
php-devel
5.1.6-27.el5_7.5, 5.3.10-1.15.amzn1, 5.3.3-3.el6_2.6
php-embedded
5.3.10-1.15.amzn1, 5.3.3-3.el6_2.6
php-enchant
5.3.3-3.el6_2.6
php-fpm
5.3.10-1.15.amzn1
php-gd
5.1.6-27.el5_7.5, 5.3.10-1.15.amzn1, 5.3.3-3.el6_2.6
php-imap
5.1.6-27.el5_7.5, 5.3.10-1.15.amzn1, 5.3.3-3.el6_2.6
php-intl
5.3.10-1.15.amzn1, 5.3.3-3.el6_2.6
php-ldap
5.1.6-27.el5_7.5, 5.3.10-1.15.amzn1, 5.3.3-3.el6_2.6
php-mbstring
5.1.6-27.el5_7.5, 5.3.10-1.15.amzn1, 5.3.3-3.el6_2.6
php-mcrypt
5.3.10-1.15.amzn1
php-mssql
5.3.10-1.15.amzn1
php-mysql
5.1.6-27.el5_7.5, 5.3.10-1.15.amzn1, 5.3.3-3.el6_2.6
php-mysqlnd
5.3.10-1.15.amzn1
php-ncurses
5.1.6-27.el5_7.5
php-odbc
5.1.6-27.el5_7.5, 5.3.10-1.15.amzn1, 5.3.3-3.el6_2.6
php-pdo
5.1.6-27.el5_7.5, 5.3.10-1.15.amzn1, 5.3.3-3.el6_2.6
php-pgsql
5.1.6-27.el5_7.5, 5.3.10-1.15.amzn1, 5.3.3-3.el6_2.6
php-process
5.3.10-1.15.amzn1, 5.3.3-3.el6_2.6
Timeline
Publicly disclosed
Feb 2, 2012
Last updated
Mar 9, 2026
Weakness Type
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
- CWE-190 Integer Overflow or Wraparound
- CWE-228 Improper Handling of Syntactically Invalid Structure
- CWE-399
References
- advisoryRHSA-2012:0092
- advisoryRHSA-2012:0093
- advisory47806
- exploitgist.github.com · 1725489
- exploitExploitDB-18460
FAQ
Common Questions.
The php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote attackers to execute arbitrary code via a request containing a large number of variables, related to improper handling of array variables.
Affected: PHP versions 5.3.9; php5 (debian); php-bcmath (amazon), among others. The full list is in the CVE brief.
It is not listed in any known-exploited vulnerabilities catalog.
No, it is not currently listed in the CISA Known Exploited Vulnerabilities catalog.
Public exploit code is available.
Fixed versions are available, including apache2-mod_php5 5.6.28-1.1, apache2-mod_php7 7.0.14-1.4, PHP 0:4.3.9-3.36.
Brandefense priority: patch immediately, because public exploit code exists for a high-severity flaw.
Is CVE-2012-0830 On Your Attack Surface?
Brandefense matches it against the products discovered on your perimeter and opens a finding the day a CVE like this is listed.
Request A Demo