Wind River Support Network

HomeDefectsLIN5-19839
Fixed

LIN5-19839 : Security Advisory - php - CVE-2014-3668

Created: Dec 1, 2014    Updated: Dec 19, 2017
Resolved Date: Jan 5, 2015
Found In Version: 5.0.1.22
Fix Version: 5.0.1.23
Severity: Standard
Applicable for: Wind River Linux 5
Component/s: Userspace

Description

Buffer overflow in the date_from_ISO8601 function in the mkgmtime implementation in libxmlrpc/xmlrpc.c in the XMLRPC extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 allows remote attackers to cause a denial of service (application crash) via (1) a crafted first argument to the xmlrpc_set_type function or (2) a crafted argument to the xmlrpc_decode function, related to an out-of-bounds read operation.

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-3668

Other Downloads


Live chat
Online