CVE-2010-1917: Stack consumption vulnerability in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent at...

Security readout for executives and security teams

This is an old PHP denial-of-service flaw. If an application lets an attacker influence input passed to PHP's fnmatch function, a crafted long value can exhaust stack space and crash PHP, potentially interrupting the affected web process or service. Exposure is most likely in legacy PHP environments still running the listed versions, especially internet-facing applications that use fnmatch with user-controlled pattern input. Modern PHP versions should not be assumed affected based on this source bundle. Treat this as a legacy availability risk. It is urgent where old PHP remains internet-facing or supports business-critical services. If no affected PHP versions remain, document closure and focus on broader legacy runtime cleanup. Mitigation focus: Upgrade PHP using the relevant vendor or distribution security advisory.; Prioritize unsupported PHP 5.2 and early 5.3 systems for retirement.; Check vendor guidance before applying nonstandard workarounds..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.