CVE-2013-4113

Debian Bug report logs - #717139 php5: CVE-2013-4113: heap corruption in xml parser Package: php5; Maintainer for php5 is Debian PHP Maintainers <pkg-php-maint@listsaliothdebianorg>; Source for php5 is src:php5 (PTS, buildd, popcon) Reported by: Henri Salo <henri@nervfi> Date: Wed, 17 Jul 2013 08:51:01 UTC Sever ...

Several security issues were fixed in PHP ...

A buffer overflow flaw was found in the way PHP parsed deeply nested XML documents If a PHP application used the xml_parse_into_struct() function to parse untrusted XML content, an attacker able to supply specially-crafted XML could use this flaw to crash the application or, possibly, execute arbitrary code with the privileges of the user running ...

A buffer overflow flaw was found in the way PHP parsed deeply nested XML documents If a PHP application used the xml_parse_into_struct() function to parse untrusted XML content, an attacker able to supply specially-crafted XML could use this flaw to crash the application or, possibly, execute arbitrary code with the privileges of the user running ...

ext/xml/xmlc in PHP before 5327 does not properly consider parsing depth, which allows remote attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a crafted document that is processed by the xml_parse_into_struct function ...