Description

Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS TXT record, related to the dns_get_record function.

Remediation

References

CVE-2014-4049

Related Vulnerabilities

WordPress Plugin Content Copy Protection & Prevent Image Save Cross-Site Request Forgery (1.3)

WordPress Plugin Properties and Agents-Real Estate Manager Cross-Site Scripting (6.7.1)

Joomla! Core 1.0.x Multiple Unspecified Vulnerabilities (1.0.0 - 1.0.7)

Zenphoto Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-4563)

OpenSSL NULL Pointer Dereference Vulnerability (CVE-2017-3730)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-119 CVE-2014-4049