Description
PHP before 5.6.7 might allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an unexpected data type, related to "type confusion" issues in (1) ext/soap/php_encoding.c, (2) ext/soap/php_http.c, and (3) ext/soap/soap.c, a different issue than CVE-2015-4600.
Remediation
References
Related Vulnerabilities
SharePoint Missing Authentication for Critical Function Vulnerability (CVE-2026-64921)
Oracle JRE CVE-2014-2412 Vulnerability (CVE-2014-2412)
RubyGems 7PK - Security Features Vulnerability (CVE-2015-3900)
WordPress Plugin BuddyBoss Media Cross-Site Scripting (3.2.3)
WordPress Plugin Intuitive Custom Post Order Multiple Vulnerabilities (3.1.3)