CVE-2016-9934

5

MEDIUMCVSS v2

Published

January 4, 2017

Affected

3 projects

Assigned by

MITRE

Severity scale

010

Description

ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string.

php/php-src

GitHubThe PHP Interpreter

NVD

php

NPMAllows you to run PHP code in Node.js in various ways.

= 7.0.11, = 7.0.4, = 7.0.3, = 7.0.1, = 7.0.12, <= 5.6.27, = 7.0.7, = 7.0.2, = 7.0.9, = 7.0.5, = 7.0.0, = 7.0.8, = 7.0.6, = 7.0.10NVD

php

Python Package Index

More on this CVE

NVD↗GitHub Advisory↗

Handle some of the strange standards in PHP projects

= 7.0.11, = 7.0.4, = 7.0.3, = 7.0.1, = 7.0.12, <= 5.6.27, = 7.0.7, = 7.0.2, = 7.0.9, = 7.0.5, = 7.0.0, = 7.0.8, = 7.0.6, = 7.0.10NVD

Security Advisories

CVE-2016-9934

Description

More on this CVE