Description
The resource system in PHP 5.0.0 through 5.2.1 allows context-dependent attackers to execute arbitrary code by interrupting the hash_update_file function via a userspace (1) error or (2) stream handler, which can then be used to destroy and modify internal resources. NOTE: it was later reported that PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 are also affected.
Remediation
References
Related Vulnerabilities
WordPress Plugin Jssor Slider Arbitrary File Upload (1.3)
WordPress Plugin Augmented reality Unspecified Vulnerability (1.2.0)
WordPress Plugin bizzCam Video Cross-Site Scripting (0.1)
e107 Other Vulnerability (CVE-2005-4224)
PostgreSQL Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2010-1169)