CVE-2012-0807

CVE-2012-0807 describes a stack-based buffer overflow in the Suhosin extension for PHP, specifically within the suhosin_encrypt_single_cookie function. This vulnerability affects Suhosin versions prior to 0.9.33 when transparent cookie encryption and multiheader options are enabled. A remote attacker could potentially execute arbitrary code by sending a crafted, long string in a Set-Cookie HTTP header. The vulnerability has a CVSS score of 5.1, indicating medium severity. It requires high attack complexity (AC:H) but can be exploited remotely (AV:N) without authentication (Au:N), potentially leading to partial confidentiality, integrity, and availability impacts (C:P/I:P/A:P). There is no evidence of active exploitation, nor is exploit code available in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting low public attention.