logo
DATABASE RESOURCES PRICING ABOUT US

CVE-2016-7417

Description

ext/spl/spl_array.c in PHP before 5.6.26 and 7.x before 7.0.11 proceeds with SplArray unserialization without validating a return value and data type, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via crafted serialized data.


Affected Software


CPE Name Name Version
php:php php 7.0.0
php:php php 7.0.1
php:php php 7.0.8
php:php php 7.0.9
php:php php 7.0.4
php:php php 7.0.5
php:php php 7.0.2
php:php php 7.0.3
php:php php 5.6.25
php:php php 7.0.10
php:php php 7.0.6
php:php php 7.0.7

Related