CVE

Id
93113  
CVE No.
CVE-2016-6293  
Status
Candidate  
Description
The uloc_acceptLanguageFromHTTP function in common/uloc.cpp in International Components for Unicode (ICU) through 57.1 for C/C++ does not ensure that there is a "" character at the end of a certain temporary array, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a call with a long httpAcceptLanguage argument.  
Phase
Assigned (20160724)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
792655 93113 CVE-2016-6293 MLIST:[oss-security] 20160724 Re: Fwd: CVE for PHP 5.5.38 issues  View
792656 93113 CVE-2016-6293 URL:http://openwall.com/lists/oss-security/2016/07/24/2  View
792657 93113 CVE-2016-6293 MISC:http://git.php.net/?p=php-src.git;a=commit;h=aa82e99ed8003c01f1ef4f0940e56b85c5b032d4  View
792658 93113 CVE-2016-6293 MISC:https://bugs.php.net/72533  View
792659 93113 CVE-2016-6293 BID:92127  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
5427 JVNDB-2016-006200 phpMyAdmin の Cookie の暗号化におけるユーザ名およびパスワードを解読される脆弱性 phpMyAdmin の Cookie の暗号化には、ユーザ名およびパスワードを解読される脆弱性が存在します。 CVE-2016-6606 93113 5 8.1 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006200.html  View