CVE-2012-6113

CVE-2012-6113 describes an information disclosure vulnerability in the openssl_encrypt function within PHP versions 5.3.9 through 5.3.13. By providing zero bytes of input data, remote attackers can obtain sensitive information from process memory due to an uninitialized variable. This vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity and no authentication required, potentially leading to partial confidentiality impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage surrounding this CVE.