Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Improper Input Validation Vulnerability - CVE-2015-4604 - Vulnerability Database
PHP

PHP Improper Input Validation Vulnerability - CVE-2015-4604

High
Reference: CVE-2015-4604
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2015-4604
Title: PHP Improper Input Validation Vulnerability
Overview:

The mget function in softmagic.c in file 5.x as used in the Fileinfo component in PHP before 5.4.40 5.5.x before 5.5.24 and 5.6.x before 5.6.8 does not properly maintain a certain pointer relationship which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted string that is mishandled by a quotPython script text executablequot rule.