Vulnetix
Try Vulnetix Request Demo
CVE-2014-8626 PUBLISHED CVSS 7.5 HIGH

Stack-based buffer overflow in the date_from_ISO8601 function in ext/xmlrpc/libxmlrpc/xmlrpc.c in PHP before 5.2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by including a timezone field in a date, leading to improper XML-RPC encoding.

EPSS 3.95% · 88.3th percentile

Risk Scores

CVSS v2.0
7.5
EPSS Score
3.95%
88.3th percentile

Affected Products

VendorProductVersions
n/an/an/a
phpphp0, 5.2.0, 5.2.1

Timeline

References

Open in Interactive Console →