Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2016-7129
Description:The php_wddx_process_data function in ext/wddx/wddx.c in PHP before 5.6.25 and 7.x before 7.0.10 allows remote attackers to cause a denial of service (segmentation fault) or possibly have unspecified other impact via an invalid ISO 8601 time value, as demonstrated by a wddx_deserialize call that mishandles a dateTime element in a wddxPacket XML document.
Test IDs: 1.3.6.1.4.1.25623.1.1.1.2.2016.749  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2016-7129
BugTraq ID: 92758
http://www.securityfocus.com/bid/92758
https://security.gentoo.org/glsa/201611-22
http://openwall.com/lists/oss-security/2016/09/02/9
RedHat Security Advisories: RHSA-2016:2750
http://rhn.redhat.com/errata/RHSA-2016-2750.html
http://www.securitytracker.com/id/1036680




© 1998-2025 E-Soft Inc. All rights reserved.