|
|
| |
|
| |
php: code execution
| Package(s): | php |
CVE #(s): | CVE-2013-4113
|
| Created: | July 15, 2013 |
Updated: | July 23, 2013 |
| Description: |
From the Red Hat advisory:
A buffer overflow flaw was found in the way PHP parsed deeply nested XML
documents. If a PHP application used the xml_parse_into_struct() function
to parse untrusted XML content, an attacker able to supply
specially-crafted XML could use this flaw to crash the application or,
possibly, execute arbitrary code with the privileges of the user running
the PHP interpreter. |
| Alerts: |
|
( Log in to post comments)
|
|
|