EUVD-2016-8269

Malware in sbrugna...

icu:message_formatter_fuzzer: Heap-use-after-free in icu_76::message2::MessageFormatter::~MessageFormatter

Detailed Report: https://oss-fuzz.com/testcase?key=5004888403148800 Project: icu Fuzzing Engine: afl Fuzz Target: messageformatterfuzzer Job Type: aflasanicu Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x504000000920 Crash State:...

Design/Logic Flaw

ext/intl/msgformat/msgformatformat.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale length provided to the Locale class in the ICU library, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via ...

CVE-2016-7416

ext/intl/msgformat/msgformatformat.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale length provided to the Locale class in the ICU library, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via ...

CVE-2016-7416

CVE-2016-7416 affects PHP up to 5.6.25/7.x up to 7.0.10 and PHP 5.6.26+ / 7.0.11+ fixed builds; the issue is in ext/intl/msgformat/msgformat_format.c where the ICU Locale length is not properly restricted. This allows remote attackers to cause a denial of service (application crash) via MessageFo...

CVE-2016-7416

ext/intl/msgformat/msgformatformat.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale length provided to the Locale class in the ICU library, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via ...

PT-2016-3379

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.6.26 PHP versions 7.x prior to 7.0.11 Description The issue is caused by a buffer overflow in the ext/intl/msgformat/msgformat format.c component of the PHP interpreter. This can be exploited by a remote attacker to cau...

CVE-2016-7416: Improper Restriction of Operations within the Bounds of a Memory Buffer

ext/intl/msgformat/msgformatformat.c in PHP before 5.6.26 and 7.x before 7.0.11 does not properly restrict the locale length provided to the Locale class in the ICU library, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via ...