CVE-2012-0789

CVE-2012-0789 is a memory leak vulnerability in PHP versions prior to 5.3.9, specifically within its timezone functionality. Remote attackers can exploit this by repeatedly triggering strtotime function calls, leading to memory exhaustion and a denial of service. The vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity and no authentication required, resulting in partial availability impact. While not listed on CISA's KEV catalog, an exploit for PHP 5.3.8 leading to remote denial of service is available on ExploitDB, though there is minimal community discussion or media coverage surrounding this CVE.