CVE-2013-6712
28.11.2013, 04:37
The scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted interval specification.Enginsight
| Vendor | Product | Version |
|---|---|---|
| php | php | 𝑥 < 5.3.29 |
| php | php | 5.4.0 ≤ 𝑥 < 5.4.24 |
| php | php | 5.5.0 ≤ 𝑥 < 5.5.8 |
| apple | mac_os_x | 𝑥 ≤ 10.10.2 |
| opensuse | opensuse | 11.4 |
| opensuse | opensuse | 12.2 |
| opensuse | opensuse | 12.3 |
| opensuse | opensuse | 13.1 |
| canonical | ubuntu_linux | 10.04 |
| canonical | ubuntu_linux | 12.04 |
| canonical | ubuntu_linux | 12.10 |
| canonical | ubuntu_linux | 13.04 |
| canonical | ubuntu_linux | 13.10 |
| debian | debian_linux | 6.0 |
| debian | debian_linux | 7.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References