CVE-2013-6712 in PHP
Сводка (Английский)
The scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted interval specification.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Резервировать
08.11.2013
Раскрытие
27.11.2013
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 11339 | PHP OBJECT parse_iso_intervals.c DateInterval повреждение памяти | 119 | Не определено | Официальное исправление | CVE-2013-6712 |