Fluid Attacks Database

Description

Unspecified vulnerability in the _php_stream_scandir function in the stream implementation in PHP before 5.3.15 and 5.4.x before 5.4.5 has unknown impact and remote attack vectors, related to an "overflow."

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel5	php	<0:5.1.6-43.el5_10	0:5.1.6-43.el5_10
rpm rhel6	php	<0:5.3.3-22.el6	0:5.3.3-22.el6
rpm rhel5	php53	<0:5.3.3-21.el5	0:5.3.3-21.el5

Aliases

1. CVE-2012-26882. NVD-2012-26883. OSV-2012-2688

References

1. https://vulncheck.com/cve/CVE-2012-26882. https://github.com/shelld3v/CVE-2012-2688

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.