CVE-2012-2376 [Critical] | Memory Corruption in Php

CVE-2012-2376 is rated High Exploit Risk (84/100): CVSS Critical severity, with high exploitation likelihood (EPSS 37.49%, 97th percentile). 2 public exploit reference(s) are indexed (Exploit-DB). Public exploits are available—assess exposure, apply mitigations, and prioritize patching.

EDB-ID	Source	Kind	Published	Link
18861	exploit_db	edb	2012-05-11	Exploit-DB ↗
—	nvd_ref	exploit_tag		Exploit-DB ↗

EDB-ID

Source

Kind

Published

Link

18861

exploit_db

edb

2012-05-11

Exploit-DB ↗

—

nvd_ref

exploit_tag

Exploit-DB ↗

#	Date	Old EPSS score	New EPSS score	Delta (New - Old)
1	2026-04-12	51.94%	37.49%	-14.45%
2	2026-04-04	41.55%	51.94%	+10.39%
3	2026-03-04	—	41.55%	—

Date

Old EPSS score

New EPSS score

Delta (New - Old)

2026-04-12

51.94%

37.49%

-14.45%

2026-04-04

41.55%

51.94%

+10.39%

2026-03-04

—

41.55%

—

Base score	Version	Severity	Vector	Exploitability	Impact	Score source
10.0	2.0	HIGH	`AV:N/AC:L/Au:N/C:C/I:C/A:C` Click to expand Access vector (AV:N) Can be exploited remotely over network reachability. Access complexity (AC:L) Exploitation conditions are straightforward and predictable. Authentication (AU:N) No authentication is required. Confidentiality impact (C:C) Complete confidentiality impact. Integrity impact (I:C) Complete integrity impact. Availability impact (A:C) Complete availability impact.	10.0	10.0	[email protected]

Base score

Version

Severity

Vector

Exploitability

Impact

Score source

10.0

2.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C Click to expand

Access vector (AV:N): Can be exploited remotely over network reachability.
Access complexity (AC:L): Exploitation conditions are straightforward and predictable.
Authentication (AU:N): No authentication is required.
Confidentiality impact (C:C): Complete confidentiality impact.
Integrity impact (I:C): Complete integrity impact.
Availability impact (A:C): Complete availability impact.

10.0

[email protected]

OS Trackers for CVE-2012-2376

vendor	priority	summary	link
`redhat`	low	—	https://access.redhat.com/security/cve/CVE-2012-2376
`ubuntu`	medium	CVE-2012-2376 medium priority: Ubuntu including 1 source packages (php5), 6 status rows across 6 suites (hardy, lucid, natty, oneiric, precise, upstream): ignored 5, needs-triage 1.	https://ubuntu.com/security/CVE-2012-2376

Affected software / configurations for CVE-2012-2376

Vendor	Product	Version	Raw CPE
php	php	<= 5.4.3	cpe:2.3:a:php:php::::::::
php	php	1.0	cpe:2.3:a:php:php:1.0:::::::*
php	php	2.0	cpe:2.3:a:php:php:2.0:::::::*
php	php	2.0b10	cpe:2.3:a:php:php:2.0b10:::::::*
php	php	3.0	cpe:2.3:a:php:php:3.0:::::::*
php	php	3.0.1	cpe:2.3:a:php:php:3.0.1:::::::*
php	php	3.0.2	cpe:2.3:a:php:php:3.0.2:::::::*
php	php	3.0.3	cpe:2.3:a:php:php:3.0.3:::::::*
php	php	3.0.4	cpe:2.3:a:php:php:3.0.4:::::::*
php	php	3.0.5	cpe:2.3:a:php:php:3.0.5:::::::*
php	php	3.0.6	cpe:2.3:a:php:php:3.0.6:::::::*
php	php	3.0.7	cpe:2.3:a:php:php:3.0.7:::::::*
php	php	3.0.8	cpe:2.3:a:php:php:3.0.8:::::::*
php	php	3.0.9	cpe:2.3:a:php:php:3.0.9:::::::*
php	php	3.0.10	cpe:2.3:a:php:php:3.0.10:::::::*
php	php	3.0.11	cpe:2.3:a:php:php:3.0.11:::::::*
php	php	3.0.12	cpe:2.3:a:php:php:3.0.12:::::::*
php	php	3.0.13	cpe:2.3:a:php:php:3.0.13:::::::*
php	php	3.0.14	cpe:2.3:a:php:php:3.0.14:::::::*
php	php	3.0.15	cpe:2.3:a:php:php:3.0.15:::::::*
php	php	3.0.16	cpe:2.3:a:php:php:3.0.16:::::::*
php	php	3.0.17	cpe:2.3:a:php:php:3.0.17:::::::*
php	php	3.0.18	cpe:2.3:a:php:php:3.0.18:::::::*
php	php	4.0	cpe:2.3:a:php:php:4.0:beta_4_patch1::::::
php	php	4.0	cpe:2.3:a:php:php:4.0:beta1::::::
php	php	4.0	cpe:2.3:a:php:php:4.0:beta2::::::
php	php	4.0	cpe:2.3:a:php:php:4.0:beta3::::::
php	php	4.0	cpe:2.3:a:php:php:4.0:beta4::::::
php	php	4.0.0	cpe:2.3:a:php:php:4.0.0:::::::*
php	php	4.0.1	cpe:2.3:a:php:php:4.0.1:::::::*
php	php	4.0.2	cpe:2.3:a:php:php:4.0.2:::::::*
php	php	4.0.3	cpe:2.3:a:php:php:4.0.3:::::::*
php	php	4.0.4	cpe:2.3:a:php:php:4.0.4:::::::*
php	php	4.0.5	cpe:2.3:a:php:php:4.0.5:::::::*
php	php	4.0.6	cpe:2.3:a:php:php:4.0.6:::::::*
php	php	4.0.7	cpe:2.3:a:php:php:4.0.7:::::::*
php	php	4.1.0	cpe:2.3:a:php:php:4.1.0:::::::*
php	php	4.1.1	cpe:2.3:a:php:php:4.1.1:::::::*
php	php	4.1.2	cpe:2.3:a:php:php:4.1.2:::::::*
php	php	4.2.0	cpe:2.3:a:php:php:4.2.0:::::::*
php	php	4.2.1	cpe:2.3:a:php:php:4.2.1:::::::*
php	php	4.2.2	cpe:2.3:a:php:php:4.2.2:::::::*
php	php	4.2.3	cpe:2.3:a:php:php:4.2.3:::::::*
php	php	4.3.0	cpe:2.3:a:php:php:4.3.0:::::::*
php	php	4.3.1	cpe:2.3:a:php:php:4.3.1:::::::*
php	php	4.3.2	cpe:2.3:a:php:php:4.3.2:::::::*
php	php	4.3.3	cpe:2.3:a:php:php:4.3.3:::::::*
php	php	4.3.4	cpe:2.3:a:php:php:4.3.4:::::::*
php	php	4.3.5	cpe:2.3:a:php:php:4.3.5:::::::*
php	php	4.3.6	cpe:2.3:a:php:php:4.3.6:::::::*
php	php	4.3.7	cpe:2.3:a:php:php:4.3.7:::::::*
php	php	4.3.8	cpe:2.3:a:php:php:4.3.8:::::::*
php	php	4.3.9	cpe:2.3:a:php:php:4.3.9:::::::*
php	php	4.3.10	cpe:2.3:a:php:php:4.3.10:::::::*
php	php	4.3.11	cpe:2.3:a:php:php:4.3.11:::::::*
php	php	4.4.0	cpe:2.3:a:php:php:4.4.0:::::::*
php	php	4.4.1	cpe:2.3:a:php:php:4.4.1:::::::*
php	php	4.4.2	cpe:2.3:a:php:php:4.4.2:::::::*
php	php	4.4.3	cpe:2.3:a:php:php:4.4.3:::::::*
php	php	4.4.4	cpe:2.3:a:php:php:4.4.4:::::::*
php	php	4.4.5	cpe:2.3:a:php:php:4.4.5:::::::*
php	php	4.4.6	cpe:2.3:a:php:php:4.4.6:::::::*
php	php	4.4.7	cpe:2.3:a:php:php:4.4.7:::::::*
php	php	4.4.8	cpe:2.3:a:php:php:4.4.8:::::::*
php	php	4.4.9	cpe:2.3:a:php:php:4.4.9:::::::*
php	php	5.0.0	cpe:2.3:a:php:php:5.0.0:::::::*
php	php	5.0.0	cpe:2.3:a:php:php:5.0.0:beta1::::::
php	php	5.0.0	cpe:2.3:a:php:php:5.0.0:beta2::::::
php	php	5.0.0	cpe:2.3:a:php:php:5.0.0:beta3::::::
php	php	5.0.0	cpe:2.3:a:php:php:5.0.0:beta4::::::
php	php	5.0.0	cpe:2.3:a:php:php:5.0.0:rc1::::::
php	php	5.0.0	cpe:2.3:a:php:php:5.0.0:rc2::::::
php	php	5.0.0	cpe:2.3:a:php:php:5.0.0:rc3::::::
php	php	5.0.1	cpe:2.3:a:php:php:5.0.1:::::::*
php	php	5.0.2	cpe:2.3:a:php:php:5.0.2:::::::*
php	php	5.0.3	cpe:2.3:a:php:php:5.0.3:::::::*
php	php	5.0.4	cpe:2.3:a:php:php:5.0.4:::::::*
php	php	5.0.5	cpe:2.3:a:php:php:5.0.5:::::::*
php	php	5.1.0	cpe:2.3:a:php:php:5.1.0:::::::*
php	php	5.1.1	cpe:2.3:a:php:php:5.1.1:::::::*

References for CVE-2012-2376

URL	Tags
http://isc.sans.edu/diary.html?storyid=13255
http://openwall.com/lists/oss-security/2012/05/20/2
http://www.exploit-db.com/exploits/18861/	Exploit
http://www.securitytracker.com/id?1027089
https://bugzilla.redhat.com/show_bug.cgi?id=823464
https://exchange.xforce.ibmcloud.com/vulnerabilities/75778

URL

CVE-2012-2376

Public exploit references (Exploit-DB) for CVE-2012-2376

Exploit prediction scoring system (EPSS) score for CVE-2012-2376

Common vulnerability scoring system (CVSS) metrics for CVE-2012-2376

Weakness enumeration for CVE-2012-2376

OS Trackers for CVE-2012-2376

Affected software / configurations for CVE-2012-2376

References for CVE-2012-2376