CVE

Id
89960  
CVE No.
CVE-2016-3141  
Status
Candidate  
Description
Use-after-free vulnerability in wddx.c in the WDDX extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact by triggering a wddx_deserialize call on XML data containing a crafted var element.  
Phase
Assigned (20160313)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
778083 89960 CVE-2016-3141 CONFIRM:http://git.php.net/?p=php-src.git;a=commit;h=b1bd4119bcafab6f9a8f84d92cd65eec3afeface  View
778084 89960 CVE-2016-3141 CONFIRM:https://bugs.php.net/bug.php?id=71587  View
778085 89960 CVE-2016-3141 CONFIRM:https://php.net/ChangeLog-5.php  View
778086 89960 CVE-2016-3141 CONFIRM:https://support.apple.com/HT206567  View
778087 89960 CVE-2016-3141 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinoct2016-3090566.html  View
778088 89960 CVE-2016-3141 APPLE:APPLE-SA-2016-05-16-4  View
778089 89960 CVE-2016-3141 URL:http://lists.apple.com/archives/security-announce/2016/May/msg00004.html  View
778090 89960 CVE-2016-3141 SUSE:SUSE-SU-2016:1145  View
778091 89960 CVE-2016-3141 URL:http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html  View
778092 89960 CVE-2016-3141 SUSE:SUSE-SU-2016:1166  View
778093 89960 CVE-2016-3141 URL:http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html  View
778094 89960 CVE-2016-3141 SUSE:openSUSE-SU-2016:1167  View
778095 89960 CVE-2016-3141 URL:http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html  View
778096 89960 CVE-2016-3141 SUSE:openSUSE-SU-2016:1173  View
778097 89960 CVE-2016-3141 URL:http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html  View
778098 89960 CVE-2016-3141 UBUNTU:USN-2952-1  View
778099 89960 CVE-2016-3141 URL:http://www.ubuntu.com/usn/USN-2952-1  View
778100 89960 CVE-2016-3141 UBUNTU:USN-2952-2  View
778101 89960 CVE-2016-3141 URL:http://www.ubuntu.com/usn/USN-2952-2  View
778102 89960 CVE-2016-3141 BID:84271  View
778103 89960 CVE-2016-3141 URL:http://www.securityfocus.com/bid/84271  View
778104 89960 CVE-2016-3141 SECTRACK:1035255  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
1423 JVNDB-2016-002196 Oracle Database Server の Java VM における脆弱性 Oracle Database Server の Java VM には、機密性、完全性、および可用性に影響のある脆弱性が存在します。 CVE-2016-3454 89960 7.6 9 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002196.html  View