Re: possible flaw in widely used strtod.c implementation

[Josh Bressers <bressers () redhat com>]

----- Original Message -----
> On Wed, Jan 5, 2011 at 8:23 PM, Pierre Joye <pierre.php () gmail com>
> wrote:
> > On Wed, Jan 5, 2011 at 5:52 PM, Michael Gilbert
> > <michael.s.gilbert () gmail com> wrote:
> >
> > > The fact that this bug can lead to a denial-of-service in PHP is
> > > sufficient to warrant a CVE for PHP, but nothing else (I think). If
> > > it
> > > can lead to a dos in other apps, then each should get their own CVE
> > > (again in my opinion).
> >
> > I think so too but in any case it would rock if I could get a CVE #
> > asap, we are going to release 5.2.17/5.3.5 tomorrow (packaging now).
>
> Anyone?

Please use CVE-2010-4645

Thanks.

-- 
    JB