The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable destruction routines.
Affected Platforms
Canonical Ubuntu LinuxRedhat Enterprise Linux WorkstationRedhat Enterprise Linux DesktopRedhat Enterprise Linux ServerPhp PhpNovell Suse LinuxSuse Linux Enterprise Server