CVE-2013-6712

The scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow…

published November 28, 2013

CVSS
—
EPSS
5%
Percentile
91.6
In the wild
Unconfirmed
What it is

The scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted interval specification.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04575 · 91.6th percentile
Published
2013-11-28T02:00Z
EPSS history
Timeline
  • 28 NOV 02:00Z
    The scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow…
    cvelistv5