Test Kennung:	1.3.6.1.4.1.25623.1.0.809742
Kategorie:	Web application abuses
Titel:	PHP 'php_parserr' Heap Based Buffer Overflow Vulnerability (Windows)
Zusammenfassung:	PHP is prone to a heap-based buffer overflow vulnerability.
Beschreibung:	Summary: PHP is prone to a heap-based buffer overflow vulnerability. Vulnerability Insight: The flaw is due to buffer overflow error in the 'php_parserr' function in ext/standard/dns.c script. Vulnerability Impact: Successfully exploiting this issue allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code on the affected system. Affected Software/OS: PHP versions 5.6.x before 5.6.0, 5.5.x before 5.5.14, 5.4.x before 5.4.30, 5.3.x before 5.3.29 on Windows Solution: Update to PHP version 5.6.0 or 5.5.14 or 5.4.30 or 5.3.29 or later. CVSS Score: 5.1 CVSS Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Querverweis:	BugTraq ID: 68007 Common Vulnerability Exposure (CVE) ID: CVE-2014-4049 http://lists.apple.com/archives/security-announce/2015/Apr/msg00001.html http://www.securityfocus.com/bid/68007 Debian Security Information: DSA-2961 (Google Search) http://www.debian.org/security/2014/dsa-2961 HPdes Security Advisory: HPSBUX03102 http://marc.info/?l=bugtraq&m=141017844705317&w=2 HPdes Security Advisory: SSRT101681 http://www.openwall.com/lists/oss-security/2014/06/13/4 RedHat Security Advisories: RHSA-2014:1765 http://rhn.redhat.com/errata/RHSA-2014-1765.html RedHat Security Advisories: RHSA-2014:1766 http://rhn.redhat.com/errata/RHSA-2014-1766.html http://www.securitytracker.com/id/1030435 http://secunia.com/advisories/59270 http://secunia.com/advisories/59329 http://secunia.com/advisories/59418 http://secunia.com/advisories/59496 http://secunia.com/advisories/59513 http://secunia.com/advisories/59652 http://secunia.com/advisories/60998 SuSE Security Announcement: SUSE-SU-2014:0868 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00001.html SuSE Security Announcement: SUSE-SU-2014:0869 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-07/msg00002.html SuSE Security Announcement: openSUSE-SU-2014:0841 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-06/msg00051.html SuSE Security Announcement: openSUSE-SU-2014:0942 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-07/msg00032.html
Copyright	Copyright (C) 2016 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.