PHP NULL Pointer Dereference Vulnerability (CVE-2016-9934)

Description

ext/wddx/wddx.c in PHP before 5.6.28 and 7.x before 7.0.13 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted serialized data in a wddxPacket XML document, as demonstrated by a PDORow string.

Remediation

References

CVE-2016-9934

Related Vulnerabilities

PHP Improper Input Validation Vulnerability (CVE-2015-4605)

Oracle JRE CVE-2013-5842 Vulnerability (CVE-2013-5842)

Plone arbitrary code execution

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-40604)

e107 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-2750)

Severity

High

Classification

CVE-2016-9934 CWE-476 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H