CVE-2014-8626

Stack-based buffer overflow in the date_from_ISO8601 function in ext/xmlrpc/libxmlrpc/xmlrpc.c in PHP before 5.2.7 allows remote attackers to cause a denial of…

published November 23, 2014

CVSS
—
EPSS
6%
Percentile
93.1
In the wild
Unconfirmed
What it is

Stack-based buffer overflow in the date_from_ISO8601 function in ext/xmlrpc/libxmlrpc/xmlrpc.c in PHP before 5.2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by including a timezone field in a date, leading to improper XML-RPC encoding.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05781 · 93.1th percentile
Published
2014-11-23T02:00Z
EPSS history
Timeline
  • 23 NOV 02:00Z
    Stack-based buffer overflow in the date_from_ISO8601 function in ext/xmlrpc/libxmlrpc/xmlrpc.c in PHP before 5.2.7 allows remote attackers to cause a denial of…
    cvelistv5