CVE-2015-4602

CRITICAL · 9.8 CVSS Gepubliceerd: 16-05-2016

Beschrijving

The __PHP_Incomplete_Class function in ext/standard/incomplete_class.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to a "type confusion" issue.

Vendors

Redhat Php

Affected products

Enterprise Linux Php Enterprise Linux Desktop Enterprise Linux Hpc Node Enterprise Linux Hpc Node Eus Enterprise Linux Server Enterprise Linux Server Eus Enterprise Linux Workstation

References

git.php.net
php.net
rhn.redhat.com
rhn.redhat.com
rhn.redhat.com
rhn.redhat.com
www.openwall.com
www.oracle.com
www.securityfocus.com
www.securitytracker.com
bugs.php.net