Description

Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS TXT record, related to the dns_get_record function.

Remediation

References

CVE-2014-4049

Related Vulnerabilities

WordPress Plugin Gravity Forms Information Disclosure (2.4.8)

Oracle Database Server CVE-2006-5333 Vulnerability (CVE-2006-5333)

MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2012-5394)

WordPress Plugin Simple JWT Login-Login and Register to WordPress using JWT Insecure Password Creation (3.2.1)

WordPress Plugin ShiftNav-Responsive Mobile Menu Cross-Site Scripting (1.5.2)

Severity

Medium

Classification

CVE-2014-4049 CWE-119

Tags

Missing Update Known Vulnerabilities