10 matches found
PHP process_nested_data Code Execution
The vulnerability of the processnesteddata function in the PHP programming language is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
PHP process_nested_data Code Execution
The vulnerability of the processnesteddata function in the PHP programming language is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
PHP Interpreter RCE
The vulnerability of the PHP interpreter in the processnesteddata function ext/standard/varunserializer.re lies in the use of memory after it is freed. As a result of exploiting this vulnerability, a malicious actor who operates remotely can execute arbitrary code through a specially crafted...
php: use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re
A flaws was discovered in the way PHP performed object unserialization. Specially crafted input processed by the unserialize function could cause a PHP application to crash or, possibly, execute arbitrary code...
php: use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re
A flaws was discovered in the way PHP performed object unserialization. Specially crafted input processed by the unserialize function could cause a PHP application to crash or, possibly, execute arbitrary code...
PHP process_nested_data function memory misreference vulnerability
PHP is a popular programming language. A memory misreference vulnerability in the processnesteddata function in PHP ext/standard/varunserializer.re allows remote attackers to execute arbitrary code using special unserialized calls...
PT-2015-1020
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.39 PHP versions 5.5.x prior to 5.5.23 PHP versions 5.6.x prior to 5.6.7 Description The issue is related to a use-after-free vulnerability in the process nested data function. This vulnerability allows remote attacker...
PT-2014-2047
Name of the Vulnerable Software and Affected Versions PHP versions 5.4.x through 5.4.36 PHP versions 5.5.x through 5.5.20 PHP versions 5.6.x through 5.6.4 Description The issue is related to a use-after-free vulnerability in the process nested data function in ext/standard/var unserializer.re in...
PT-2014-2038
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.36 PHP versions 5.5.x prior to 5.5.20 PHP versions 5.6.x prior to 5.6.4 Description The issue is related to a use-after-free vulnerability in the process nested data function. This vulnerability can be exploited by a...
UBUNTU-CVE-2014-8142
Use-after-free vulnerability in the processnesteddata function in ext/standard/varunserializer.re in PHP before 5.4.36, 5.5.x before 5.5.20, and 5.6.x before 5.6.4 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate keys...