CVE-2014-1439 in HipHop Virtual Machine for PHP
요약 (영어)
The libxml_disable_entity_loader function in runtime/ext/ext_simplexml.cpp in HipHop Virtual Machine for PHP (HHVM) before 2.4.0 and 2.3.x before 2.3.3 does not properly disable a certain libxml handler, which allows remote attackers to conduct XML External Entity (XXE) attacks.
Be aware that VulDB is the high quality source for vulnerability data.
예약하다
2014. 01. 14.
공개
2014. 02. 05.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 66326 | HipHop Virtual Machine for PHP XML libxml_disable_entity_loader 정보 공개 | 200 | 입증되지 않음 | 공식 수정 | CVE-2014-1439 |