EUVD-2016-8269

Malware in sbrugna...

Design/Logic Flaw

ext/intl/msgformat/msgformatformat.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale length provided to the Locale class in the ICU library, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via ...

CVE-2016-7416

CVE-2016-7416 affects PHP up to 5.6.25/7.x up to 7.0.10 and PHP 5.6.26+ / 7.0.11+ fixed builds; the issue is in ext/intl/msgformat/msgformat_format.c where the ICU Locale length is not properly restricted. This allows remote attackers to cause a denial of service (application crash) via MessageFo...

CVE-2016-7416

ext/intl/msgformat/msgformatformat.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale length provided to the Locale class in the ICU library, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via ...