Description

Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket.

Remediation

References

CVE-2011-1938

Related Vulnerabilities

WordPress Plugin ZoomSounds-WordPress Wave Audio Player with Playlist Arbitrary File Upload (2.0)

Ruby on Rails CVE-2018-16477 Vulnerability (CVE-2018-16477)

WordPress Plugin Tagregator Cross-Site Scripting (0.6)

WordPress Plugin Awesome Filterable Portfolio Multiple SQL Injection Vulnerabilities (1.8.6)

Perl Out-of-bounds Write Vulnerability (CVE-2023-47038)

Severity

High

Classification

CVE-2011-1938 CWE-119

Tags

Missing Update Known Vulnerabilities