Lucene search

K
prionPRIOn knowledge basePRION:CVE-2015-8617
HistoryJan 19, 2016 - 5:59 a.m.

Format string

2016-01-1905:59:00
PRIOn knowledge base
www.prio-n.com
1

8.1 High

AI Score

Confidence

Low

0.176 Low

EPSS

Percentile

96.2%

Format string vulnerability in the zend_throw_or_error function in Zend/zend_execute_API.c in PHP 7.x before 7.0.1 allows remote attackers to execute arbitrary code via format string specifiers in a string that is misused as a class name, leading to incorrect error handling.

CPENameOperatorVersion
phpeq7.0.1

8.1 High

AI Score

Confidence

Low

0.176 Low

EPSS

Percentile

96.2%