CVE-2017-16642
HIGHPHP <5.6.32, 7.x <7.0.25, 7.1.x <7.1.11 - Info Disclosure
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2017-16642. PoCs published by Wei Lei and Liu Yang.
AI-analyzed exploit summary This exploit demonstrates a heap out-of-bounds read vulnerability in PHP's timelib_meridian() function, triggered via wddx_deserialize() with malformed input. The PoC causes a crash due to a heap-buffer-overflow, as confirmed by AddressSanitizer.
Description
In PHP before 5.6.32, 7.x before 7.0.25, and 7.1.x before 7.1.11, an error in the date extension's timelib_meridian handling of 'front of' and 'back of' directives could be used by attackers able to supply date strings to leak information from the interpreter, related to ext/date/lib/parse_date.c out-of-bounds reads affecting the php_parse_date function. NOTE: this is a different issue than CVE-2017-11145.
Exploits (1)
This exploit demonstrates a heap out-of-bounds read vulnerability in PHP's timelib_meridian() function, triggered via wddx_deserialize() with malformed input. The PoC causes a crash due to a heap-buffer-overflow, as confirmed by AddressSanitizer.
References (13)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N