Multiple vulnerabilities in PHP and extensions

Beschreibung

Multiple serious vulnerabilities have been found in PHP and extensions. Malicious users can exploit these vulnerabilities to cause denial of service or inject code.

Below is a complete list of vulnerabilities

1. Multiple integer overflows can be exploited remotely via a specially designed year value;
2. Lack of tokens validation can be exploited remotely via a specially designed name;
3. Improper tmp drectory addres containing can be exploited locally via a file manipulations.

Ursprüngliche Informationshinweise

CVE Liste

• CVE-2015-2331
  critical
• CVE-2015-0231
  critical
• CVE-2015-2305
  critical

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com