php5: code execution
| Package(s): | php5 | CVE #(s): | CVE-2014-9426 | ||||
| Created: | February 19, 2015 | Updated: | February 25, 2015 | ||||
| Description: | From the openSUSE advisory:
CVE-2014-9426: The apprentice_load function in libmagic/apprentice.c in the Fileinfo component in PHP through 5.6.4 attempted to perform a free operation on a stack-based character array, which allowed remote attackers to cause a denial of service (memory corruption or application crash) or possibly have unspecified other impact via unknown vectors | ||||||
| Alerts: |
| ||||||