Integer overflow in the mt_rand function in PHP before 5.3.4 might make it easier for context-dependent attackers to predict the return values by leveraging a script's use of a large max parameter, as demonstrated by a value that exceeds mt_getrandmax.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2011-02-02 14:00
Updated : 2018-10-30 09:26
NVD link : CVE-2011-0755
Mitre link : CVE-2011-0755
JSON object : View
CWE
CWE-189
Numeric Errors
Products Affected
php
- php