CVE-2015-4603

CRITICAL · 9.8 CVSS Gepubliceerd: 16-05-2016

Beschrijving

The exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to execute arbitrary code via an unexpected data type, related to a "type confusion" issue.

Vendors

Php Redhat

Affected products

Php Enterprise Linux Desktop Enterprise Linux Hpc Node Enterprise Linux Hpc Node Eus Enterprise Linux Server Enterprise Linux Server Eus Enterprise Linux Workstation Enterprise Linux

References

php.net
rhn.redhat.com
rhn.redhat.com
rhn.redhat.com
rhn.redhat.com
www.openwall.com
www.oracle.com
www.securityfocus.com
www.securitytracker.com
bugs.php.net