Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2011-1466

19
FAUCET Score

CVE-2011-1466 describes an integer overflow vulnerability in the Calendar extension of PHP versions prior to 5.3.6. Specifically, the SdnToJulian function can be exploited by providing a large integer to the cal_from_jd function, leading to an application crash and denial of service. This vulnerability has a CVSS score of 5.0, indicating a medium severity, and can be exploited remotely with low attack complexity, requiring no authentication. There is no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
<= 5.3.5CPE matchmatch criteria
cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
1.0CPE matchmatch criteria
cpe:2.3:a:php:php:1.0:*:*:*:*:*:*:*
2.0CPE matchmatch criteria
cpe:2.3:a:php:php:2.0:*:*:*:*:*:*:*
2.0b10CPE matchmatch criteria
cpe:2.3:a:php:php:2.0b10:*:*:*:*:*:*:*
3.0CPE matchmatch criteria
cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

5.0MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P

Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Exploitability Score
10.0
Impact Score
2.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
5.86%
Probability of exploitation in next 30 days
EPSS Percentile
92.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0586 is in the 89th percentile among its peer group of 23,705 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (4)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: php-0:4.3.9-3.35
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: php53-0:5.3.3-1.el5_7.3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 5Fixed in: php-0:5.1.6-27.el5_7.4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: php-0:5.3.3-3.el6_1.3
View patch

Vendor Advisories (1)

redhatCVE-2011-1466Low

php: Crash by converting serial day numbers (SDN) into Julian calendar

Dec 19, 2010

References

bugs.php.net / bug.php
Exploit
lists.apple.com / archives/Security-announce/2011//Oct/msg00003.html
lists.opensuse.org / opensuse-security-announce/2012-03/msg00016.html
rhn.redhat.com / errata/RHSA-2012-0071.html
secunia.com / advisories/48668
support.apple.com / kb/HT5002
debian.org / security/2011/dsa-2266
mandriva.com / security/advisories
mandriva.com / security/advisories
php.net / ChangeLog-5.php
redhat.com / support/errata/RHSA-2011-1423.html
securityfocus.com / bid/46967
vupen.com / english/advisories/2011/0744