| Package | Affected versions | Patched versions |
|---|---|---|
| php | = 4.4.0= 4.4.1= 4.4.2= 4.4.3= 4.4.4= 4.4.5= 4.4.6= 4.4.7= 4.4.8= 5.2.0= 5.2.1= 5.2.2= 5.2.3= 5.2.4= 5.2.5= 5.2.6 |
Buffer overflow in the memnstr function in PHP 4.4.x before 4.4.9 and PHP 5.6 through 5.2.6 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via the delimiter argument to the explode function. NOTE: the scope of this issue is limited since most applications would not use an attacker-controlled delimiter, but local attacks against safe_mode are feasible.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free