Launchpad.net

CVE 2011-3267

PHP before 5.3.7 does not properly implement the error_log function, which allows context-dependent attackers to cause a denial of service (application crash) via unspecified vectors.

See the CVE page on Mitre.org for more details.