cve/2013/CVE-2013-6712.md
2024-05-26 14:27:05 +02:00

726 B

CVE-2013-6712

Description

The scan function in ext/date/lib/parse_iso_intervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted interval specification.

POC

Reference

No PoCs from references.

Github