CVE-2016-5093 in PHP
요약 (영어)
The get_icu_value_internal function in ext/intl/locale/locale_methods.c in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7 does not ensure the presence of a '\0' character, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a crafted locale_get_primary_language call.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
예약하다
2016. 05. 26.
공개
2016. 08. 07.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 90611 | PHP locale_methods.c get_icu_value_internal 정보 공개 | 125 | 정의되지 않음 | 공식 수정 | CVE-2016-5093 |