CVE-2010-4645

CVE-2010-4645 describes a denial-of-service vulnerability in the zend_strtod function, affecting PHP versions 5.2 prior to 5.2.17 and 5.3 prior to 5.3.5, as well as other products utilizing the vulnerable strtod.c implementation. An attacker can trigger an infinite loop by providing a specific floating-point value in scientific notation, which is mishandled in x87 FPU registers. This vulnerability has a CVSS score of 5.0, indicating a medium severity with a network-based attack vector, low attack complexity, and potential for partial availability impact. While there is an ExploitDB entry for this vulnerability, there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.