Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code via a sscanf PHP function call that performs argument swapping, which increments an index past the end of an array and triggers a buffer over-read.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP scanf.c 安全漏洞
Vulnerability Description
PHP是一种在服务器端执行的脚本语言。 PHP 5.1.4 及之前版本和4.4.3版本的scanf.c处理用户的格式化参数时存在安全漏洞，本地攻击者可能利用此漏洞通过PHP代码执行任意指令。 如果象如下例子那样向sscanf()函数传递指针的指针作为参数，则会触发堆溢出问题，可能导致执行任意指令： sscanf('foo '，'$1s'，$bar)
CVSS Information
N/A
Vulnerability Type
N/A