Description

Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS TXT record, related to the dns_get_record function.

Remediation

References

CVE-2014-4049

Related Vulnerabilities

WordPress Plugin YOP Poll Cross-Site Scripting (5.8.0)

PHP Other Vulnerability (CVE-2007-1717)

PHP Other Vulnerability (CVE-2003-0863)

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-4370)

Oracle Database Server Other Vulnerability (CVE-2005-3641)

Severity

Medium

Classification

CVE-2014-4049 CWE-119

Tags

Missing Update Known Vulnerabilities