Mandriva Linux Security Advisory 2009-090 - The JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2.x before 5.2.9 allows remote attackers to cause a denial of service (segmentation fault) via a malformed string to the json_decode API function. The updated packages have been patched to correct these issues.
3a87e527ab8dfac604f5529c8360a28a8cb596eecd25191ee2b7931d433ae286