CVE-2015-8879

The odbc_bindcols function in ext/odbc/php_odbc.c in PHP before 5.6.12 mishandles driver behavior for SQL_WVARCHAR columns, which allows remote attackers to…

published May 22, 2016

CVSS
—
EPSS
3%
Percentile
88.9
In the wild
Unconfirmed
What it is

The odbc_bindcols function in ext/odbc/php_odbc.c in PHP before 5.6.12 mishandles driver behavior for SQL_WVARCHAR columns, which allows remote attackers to cause a denial of service (application crash) in opportunistic circumstances by leveraging use of the odbc_fetch_array function to access a certain type of Microsoft SQL Server table.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03462 · 88.9th percentile
Published
2016-05-22T01:00Z
EPSS history
Timeline
  • 22 MAY 01:00Z
    The odbc_bindcols function in ext/odbc/php_odbc.c in PHP before 5.6.12 mishandles driver behavior for SQL_WVARCHAR columns, which allows remote attackers to…
    cvelistv5