Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Integer signedness error in the simplestring_addn function in simplestring.c in xmlrpc-epi through 0.54.2, as used in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9, allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a long first argument to the PHP xmlrpc_encode_request function.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP xmlrpc-epi simplestring.c文件整数符号错误漏洞
Vulnerability Description
PHP(PHP:Hypertext Preprocessor,PHP:超文本预处理器)是PHP Group和开放源代码社区共同维护的一种开源的通用计算机脚本语言。GD是其中的一个图形扩展库组件。xmlrpc-epi是一套采用C语言开发的易于开发者使用的序列化RPC请求的API。 PHP中使用的xmlrpc-epi 0.54.2及之前的版本中的simplestring.c文件中的‘simplestring_addn’函数存在整数符号错误漏洞。远程攻击者可通过向PHP xmlrpc_encode_reques
CVSS Information
N/A
Vulnerability Type
N/A