CVE

Id
90892  
CVE No.
CVE-2016-4073  
Status
Candidate  
Description
Multiple integer overflows in the mbfl_strcut function in ext/mbstring/libmbfl/mbfl/mbfilter.c in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted mb_strcut call.  
Phase
Assigned (20160423)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
782282 90892 CVE-2016-4073 MLIST:[oss-security] 20160423 Re: CVE request: PHP issues fixed in 7.0.5, 5.6.20 and 5.5.34 releases  View
782283 90892 CVE-2016-4073 URL:http://www.openwall.com/lists/oss-security/2016/04/24/1  View
782284 90892 CVE-2016-4073 CONFIRM:http://www.php.net/ChangeLog-5.php  View
782285 90892 CVE-2016-4073 CONFIRM:http://www.php.net/ChangeLog-7.php  View
782286 90892 CVE-2016-4073 CONFIRM:https://bugs.php.net/bug.php?id=71906  View
782287 90892 CVE-2016-4073 CONFIRM:https://gist.github.com/smalyshev/d8355c96a657cc5dba70  View
782288 90892 CVE-2016-4073 CONFIRM:https://git.php.net/?p=php-src.git;a=commit;h=64f42c73efc58e88671ad76b6b6bc8e2b62713e1  View
782289 90892 CVE-2016-4073 CONFIRM:https://support.apple.com/HT206567  View
782290 90892 CVE-2016-4073 CONFIRM:https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05240731  View
782291 90892 CVE-2016-4073 APPLE:APPLE-SA-2016-05-16-4  View
782292 90892 CVE-2016-4073 URL:http://lists.apple.com/archives/security-announce/2016/May/msg00004.html  View
782293 90892 CVE-2016-4073 DEBIAN:DSA-3560  View
782294 90892 CVE-2016-4073 URL:http://www.debian.org/security/2016/dsa-3560  View
782295 90892 CVE-2016-4073 SUSE:SUSE-SU-2016:1277  View
782296 90892 CVE-2016-4073 URL:http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00033.html  View
782297 90892 CVE-2016-4073 SUSE:openSUSE-SU-2016:1274  View
782298 90892 CVE-2016-4073 URL:http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00031.html  View
782299 90892 CVE-2016-4073 SUSE:openSUSE-SU-2016:1373  View
782300 90892 CVE-2016-4073 URL:http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00056.html  View
782301 90892 CVE-2016-4073 UBUNTU:USN-2952-1  View
782302 90892 CVE-2016-4073 URL:http://www.ubuntu.com/usn/USN-2952-1  View
782303 90892 CVE-2016-4073 UBUNTU:USN-2952-2  View
782304 90892 CVE-2016-4073 URL:http://www.ubuntu.com/usn/USN-2952-2  View
782305 90892 CVE-2016-4073 BID:85991  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4275 JVNDB-2016-005048 HPE Network Automation Software における任意のファイルに書き込まれる脆弱性 HPE Network Automation Software には、任意のファイルに書き込まれる脆弱性が存在します。 CVE-2016-4386 90892 6.9 7.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005048.html  View