Description
The odbc_bindcols function in ext/odbc/php_odbc.c in PHP before 5.6.12 mishandles driver behavior for SQL_WVARCHAR columns, which allows remote attackers to cause a denial of service (application crash) in opportunistic circumstances by leveraging use of the odbc_fetch_array function to access a certain type of Microsoft SQL Server table.
Remediation
References
Related Vulnerabilities
Oracle JRE Observable Discrepancy Vulnerability (CVE-2024-21208)
WordPress Plugin Responsive Slider-Image Slider-Slideshow for WordPress SQL Injection (2.6.8)
WordPress Plugin Video Chat Multiple Cross-Site Scripting Vulnerabilities (1.4.1)
MySQL CVE-2013-1566 Vulnerability (CVE-2013-1566)
WordPress Plugin EZP Coming Soon Page Cross-Site Scripting (1.0.0)