Home CVE Database CVE-2016-9934



ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string.

Priority: MEDIUM
CVSS v3: 7.5
Publish Date: Jan 4, 2017
Related ID: --
CVSS v2: High
Modified Date: Jan 6, 2017

Find out more about CVE-2016-9934 from the MITRE-CVE dictionary and NIST NVD

Products Affected

Login may be required to access defects or downloads.

Related Products

Product Name Status Defect Fixed Downloads
Linux 7 SCP Not Vulnerable -- -- --
Linux 7 CGP Not Vulnerable -- -- --



Live chat