CVE-2007-0911
Off-by-one error in the str_ireplace function in PHP 5.2.1 might allow context-dependent attackers to cause a denial of service (crash).
Date published : 2007-02-13
http://www.securityfocus.com/bid/22505
http://www.securityfocus.com/archive/1/459856/100/0/threaded