CVE-2016-9934 in macOS

Summary

ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservation

12/12/2016

Disclosure

01/04/2017

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
95945	Apple macOS apache_mod_php null pointer dereference	476	Not defined	Official fix	CVE-2016-9934
95039	PHP wddxPacket XML Document wddx.c null pointer dereference	476	Not defined	Official fix	CVE-2016-9934

Sources

• MITRE
• NVD
• CVE Details