PHP 'str _ repeat () 'Function Integer Overflow Vulnerability

PHP 'str _ repeat () 'Function Integer Overflow Vulnerability
PHP 'str _ repeat () 'Function Integer Overflow Vulnerability

Release date:
Updated on:

Affected Systems:

PHP 5.5.0-DEV
PHP 5.4.3
PHP 5.4.2
PHP 5.4.1RC1-DEV
PHP 5.4.1

Description:

Bugtraq id: 74702

PHP is a widely used scripting language. It is especially suitable for Web development and can be embedded into HTML.

PHP has the integer overflow vulnerability in the implementation of the 'str _ repeat () 'function. Attackers can exploit this vulnerability to execute arbitrary code in the context of the affected application.

<* Source: Andrea Palazzo
*>

Suggestion:

Vendor patch:

PHP
---
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.php.net/downloads.php

Install LNMP in CentOS 6.3 (PHP 5.4, MyySQL5.6)

Nginx startup failure occurs during LNMP deployment.

Ubuntu install Nginx php5-fpm MySQL (LNMP environment setup)

Detailed php hd scanning PDF + CD source code + full set of teaching videos

Configure the php lnmp development environment in CentOS 6

PHP details: click here
PHP: click here

This article permanently updates the link address: