CVE

Id
93952  
CVE No.
CVE-2016-7132  
Status
Candidate  
Description
ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly have unspecified other impact via an invalid wddxPacket XML document that is mishandled in a wddx_deserialize call, as demonstrated by a stray element inside a boolean element, leading to incorrect pop processing.  
Phase
Assigned (20160902)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
794964 93952 CVE-2016-7132 MLIST:[oss-security] 20160902 Re: CVE assignment for PHP 5.6.25 and 7.0.10 - and libcurl  View
794965 93952 CVE-2016-7132 URL:http://openwall.com/lists/oss-security/2016/09/02/9  View
794966 93952 CVE-2016-7132 CONFIRM:http://www.php.net/ChangeLog-5.php  View
794967 93952 CVE-2016-7132 CONFIRM:http://www.php.net/ChangeLog-7.php  View
794968 93952 CVE-2016-7132 CONFIRM:https://bugs.php.net/bug.php?id=72799  View
794969 93952 CVE-2016-7132 CONFIRM:https://github.com/php/php-src/commit/a14fdb9746262549bbbb96abb87338bacd147e1b?w=1  View
794970 93952 CVE-2016-7132 BID:92767  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4300 JVNDB-2016-005073 OpenJPEG の convert.c におけるサービス運用妨害 (DoS) の脆弱性 OpenJPEG の convert.c には、サービス運用妨害 (NULL ポインタデリファレンスおよびアプリケーションクラッシュ) 状態にされる脆弱性が存在します。 CVE-2016-7445 93952 5 7.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005073.html  View