PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability - CVE-2014-9705 - Vulnerability Database

PHP

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability - CVE-2014-9705

High

Reference: CVE-2014-9705

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-9705

Title: PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Overview:

Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38 5.5.x before 5.5.22 and 5.6.x before 5.6.6 allows remote attackers to execute arbitrary code via vectors that trigger creation of multiple dictionaries.