CVE

Id
93950  
CVE No.
CVE-2016-7130  
Status
Candidate  
Description
The php_wddx_pop_element function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly have unspecified other impact via an invalid base64 binary value, as demonstrated by a wddx_deserialize call that mishandles a binary element in a wddxPacket XML document.  
Phase
Assigned (20160902)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
794950 93950 CVE-2016-7130 MLIST:[oss-security] 20160902 Re: CVE assignment for PHP 5.6.25 and 7.0.10 - and libcurl  View
794951 93950 CVE-2016-7130 URL:http://openwall.com/lists/oss-security/2016/09/02/9  View
794952 93950 CVE-2016-7130 CONFIRM:http://www.php.net/ChangeLog-5.php  View
794953 93950 CVE-2016-7130 CONFIRM:http://www.php.net/ChangeLog-7.php  View
794954 93950 CVE-2016-7130 CONFIRM:https://bugs.php.net/bug.php?id=72750  View
794955 93950 CVE-2016-7130 CONFIRM:https://github.com/php/php-src/commit/698a691724c0a949295991e5df091ce16f899e02?w=1  View
794956 93950 CVE-2016-7130 BID:92764  View

Related JVN