PHP 'ext/standard/var.c' Incomplete Fix Use After Free Remote Code Execution Vulnerability

Bugtraq ID: 94849
Class: Design Error
CVE: CVE-2016-9936
Remote: Yes
Local: No
Published: Dec 12 2016 12:00AM
Updated: Dec 20 2016 01:08AM
Credit: taoguangchen
Vulnerable: PHP PHP 7.0.5
PHP PHP 7.0.3
PHP PHP 7.0
PHP PHP 7.0.9
PHP PHP 7.0.8
PHP PHP 7.0.7
PHP PHP 7.0.6
PHP PHP 7.0.4
PHP PHP 7.0.2
PHP PHP 7.0.10
PHP PHP 7.0.1
Not Vulnerable:


 

Privacy Statement
Copyright 2010, SecurityFocus