4 matches found
PHP 5.6.0 Development Releases CDF File NULL Pointer Dereference DoS
According to its banner, the version of PHP installed on the remote host is a development version of 5.6.0. It is, therefore, affected by a NULL pointer dereference error in the 'libmagic' library of the 'fileinfo' extension when processing malformed CDF files. By uploading a specially crafted CD...
PHP 5.6.0 'efree()' Function RCE
Binary data 6666.prm...
CVE-2014-5459
The PEARREST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a 1 rest.cachefile or 2 rest.cacheid file in /tmp/pear/cache/, related to the retrieveCacheFirst and useLocalCache functions...
CVE-2014-5459
The PEARREST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a 1 rest.cachefile or 2 rest.cacheid file in /tmp/pear/cache/, related to the retrieveCacheFirst and useLocalCache functions...