CVE-2016-7130 in PHPजानकारी

सारांश

द्वारा MITRE

The php_wddx_pop_element function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly have unspecified other impact via an invalid base64 binary value, as demonstrated by a wddx_deserialize call that mishandles a binary element in a wddxPacket XML document.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

आरक्षित करना

02/09/2016

प्रकटीकरण

11/09/2016

प्रविष्टि

VDB-91499

EPSS

0.06672

गतिविधियाँ

बहुत कम

क्षेत्र

Chemical, Energy, ...

स्रोत

Interested in the pricing of exploits?

See the underground prices here!