CVE-2014-9705 in PHP

Sumário (Inglês)

Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allows remote attackers to execute arbitrary code via vectors that trigger creation of multiple dictionaries.

Be aware that VulDB is the high quality source for vulnerability data.

Reservar

15/03/2015

Divulgação

30/03/2015

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
74064	PHP enchant.c enchant_broker_request_dict Excesso de tampão	119	Não provado	Correção oficial	CVE-2014-9705

Fontes

• MITRE
• NVD
• CVE Details