vendor:
PHP
by:
Wei Lei and Liu Yang of Nanyang Technological University
7,5
CVSS
HIGH
Heap Out-of-Bound Read
125
CWE
Product Name: PHP
Affected Version From: 7.1.8
Affected Version To: 7.1.8
Patch Exists: YES
Related CWE: N/A
CPE: a:php:php:7.1.8
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2017
Heap Out-of-Bound Read Vulnerability in timelib_meridian()
A heap out-of-bound read vulnerability in timelib_meridian() can be triggered via wddx_deserialize() or other vectors that call into this function on untrusted inputs.
Mitigation:
Input validation should be done to ensure that untrusted inputs are not passed to the vulnerable function.
