Description
Stack-based buffer overflow in the date_from_ISO8601 function in ext/xmlrpc/libxmlrpc/xmlrpc.c in PHP before 5.2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by including a timezone field in a date, leading to improper XML-RPC encoding.
Remediation
References
Related Vulnerabilities
Oracle JRE CVE-2017-10281 Vulnerability (CVE-2017-10281)
MongoDb Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2019-20924)
Sqlite Missing Release of Memory after Effective Lifetime Vulnerability (CVE-2021-45346)
XWikiplatform Other Vulnerability (CVE-2025-29925)
LimeSurvey Improper Certificate Validation Vulnerability (CVE-2019-16179)