CVE:CVE-2012-0807
CNNVD:CNNVD-201201-391
PHP（PHP：Hypertext Preprocessor，PHP：超文本预处理器）是PHP Group和开放源代码社区共同维护的一种开源的通用计算机脚本语言。该语言主要用于Web开发，支持多种数据库及操作系统。
PHP的Suhosin extension 0.9.33之前版本的transparent cookie-encryption feature的suhosin_encrypt_single_cookie函数中存在基于栈的缓冲区溢出漏洞。当suhosin.cookie.encrypt与 suhosin.multiheader启用时，远程攻击者可利用该漏洞借助在Set-Cookie HTTP标头中使用的一个超长字符串执行任意代码。
solution:Upgrade hardened-php suhosin to a higher version than *:beta_2006.09.07,*:beta_2006.09.09,0.9.31,0.9.0,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.6.1,0.9.6.2,0.9.6.3,0.9.7,0.9.8,0.9.9,0.9.9.1,0.9.10,0.9.11,0.9.12,0.9.13,0.9.14,0.9.15,0.9.16,0.9.17,0.9.18,0.9.19,0.9.20,0.9.21,0.9.22,0.9.23,0.9.24,0.9.25,0.9.26,0.9.27,0.9.28,0.9.29,0.9.30,and avoid the version *:beta_2006.09.07,*:beta_2006.09.09,(,0.9.31],0.9.0,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.6.1,0.9.6.2,0.9.6.3,0.9.7,0.9.8,0.9.9,0.9.9.1,0.9.10,0.9.11,0.9.12,0.9.13,0.9.14,0.9.15,0.9.16,0.9.17,0.9.18,0.9.19,0.9.20,0.9.21,0.9.22,0.9.23,0.9.24,0.9.25,0.9.26,0.9.27,0.9.28,0.9.29,0.9.30