CVE-2014-8626

Stack-based buffer overflow in the datefromISO8601 function in ext/xmlrpc/libxmlrpc/xmlrpc.c in PHP before 5.2.7 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code by including a timezone field in a date, leading to improper XML-RPC encoding...

CVE-2014-8626

The vulnerability CVE-2014-8626 affects PHP

CVE-2014-3668

CVE-2014-3668 affects PHP’s XMLRPC extension (libxmlrpc/xmlrpc.c: mkgmtime date_from_ISO8601). A crafted first arg to xmlrpc_set_type or a crafted arg to xmlrpc_decode can trigger an out-of-bounds read, causing a denial of service (application crash); may enable code execution per some advisories...

CVE-2014-3668

Buffer overflow in the datefromISO8601 function in the mkgmtime implementation in libxmlrpc/xmlrpc.c in the XMLRPC extension in PHP before 5.4.34, 5.5.x before 5.5.18, and 5.6.x before 5.6.2 allows remote attackers to cause a denial of service application crash via 1 a crafted first argument to t...