PT-2016-2090 · Php · Php
Manhluat
·
Publicado
2016-05-21
·
Atualizado
2022-07-20
·
CVE-2016-4344
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
PHP versions prior to 7.0.4
Description
The issue is related to an integer overflow in the
xml utf8 encode function, which can cause a heap-based buffer overflow. This can be triggered by a remote attacker using a long argument to the utf8 encode function, potentially leading to a denial of service or other unspecified impacts.Recommendations
For PHP versions prior to 7.0.4, update to version 7.0.4 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
utf8 encode function to minimize the risk of exploitation.Exploit
Correção
DoS
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Php