4.6
CVSSv2

CVE-2014-4670

Published: 10/07/2014 Updated: 07/01/2017
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
VMScore: 409
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Use-after-free vulnerability in ext/spl/spl_dllist.c in the SPL component in PHP up to and including 5.5.14 allows context-dependent malicious users to cause a denial of service or possibly have unspecified other impact via crafted iterator usage within applications in certain web-hosting environments.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

php php 5.5.0

php php 5.5.1

php php 5.5.10

php php 5.5.4

php php 5.5.5

php php 5.5.11

php php 5.5.12

php php 5.5.6

php php 5.5.7

php php 5.5.2

php php 5.5.3

php php 5.5.13

php php

php php 5.5.8

php php 5.5.9

Vendor Advisories

Several security issues were fixed in PHP ...
Several vulnerabilities were found in PHP, a general-purpose scripting language commonly used for web application development The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2014-3538 It was discovered that the original fix for CVE-2013-7345 did not sufficiently address the problem A remote attacke ...
A use-after-free flaw was found in the way PHP handled certain Standard PHP Library (SPL) Iterators A malicious script author could possibly use this flaw to disclose certain portions of server memory ...