PHP 7 is due. 0. 0 format string vulnerability with the EIP hijack analysis-vulnerability warning-the black bar safety net

PHP 7 is due. 0. 0 this format string vulnerability is 1 5 year 1 2 On On exploit-db. When found, the author in Beijing to the North-East of a information security company to work, then busy, and failed to delve into it. In recent days inadvertently saw this vulnerability and found this...

CVE-2015-8617

Removed by vendor...

CVE-2015-8617

CVE-2015-8617 is a format-string vulnerability in PHP 7.x before 7.0.1. Reported in Zend/zend_execute_API.c (zend_throw_or_error), it allows remote code execution when a string with format specifiers is misused as a class name, causing incorrect error handling. Multiple sources (NVD, SUSE, others...