CVE-2012-6113

The openssl_encrypt function in ext/openssl/openssl.c in PHP 5.3.9 through 5.3.13 does not initialize a certain variable, which allows remote attackers to obtain sensitive information from process memory by providing zero bytes of input data.

We have discovered 307,296 live websites that are affected by CVE-2012-6113.

Run a Free Instant Scan



Affected Software

Product  PHP
Category Programming Languages
Vulnerable Domains307,296 live websites (4.44% of PHP install base)
Vulnerable Versions
  • from 0 through 5.3.13
Vulnerable Versions Count45 versions ( 8.51% of all versions)



Details

  • Published - Jan 19, 2013
  • Updated - Aug 6, 2024

Website Distribution by Country

Number of websites using CVE-2012-6113
United States25,980 websites


Taiwan102,163 websites
Russia27,349 websites
Germany21,027 websites
Japan19,857 websites
Korea, South12,455 websites
China9,508 websites
France8,838 websites
Hungary7,776 websites

Website Distribution by TLD

Number of websites using CVE-2012-6113
.com146,437 websites
.ru23,611 websites
.de16,296 websites
.net10,779 websites
.info9,045 websites
.org6,008 websites
.jp5,993 websites
.nl4,952 websites
.cz4,035 websites
.it3,892 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2012-6113

Top websites that are affected by CVE-2012-6113. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*****.***********.com Canada***
*****.***.tw Taiwan*,***
*********.com GB*,***
*********.com United States*,***
********************.ru Russia*,***
**********.*****.de Germany*,***
********.com United States**,***
*******.***.ru Russia**,***
**************.ru Russia**,***
****.info France**,***
See full domain list

FAQ

A total of 307,296 websites have been identified as vulnerable to CVE-2012-6113, based on global website indexing conducted by WebTechSurvey.
The PHP is affected by the CVE-2012-6113 vulnerability.
PHP versions up to and including 5.3.13 are vulnerable to CVE-2012-6113.