CVE-2013-6712: Buffer Overflow
The scan function in ext/date/lib/parseisointervals.c in PHP through 5.5.6 does not properly restrict creation of DateInterval objects, which might allow remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted interval specification.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6712?
CVE-2013-6712 is classified as a moderate severity vulnerability due to its potential to cause denial of service through heap-based buffer over-read.
How do I fix CVE-2013-6712?
To remediate CVE-2013-6712, you should upgrade PHP to version 5.5.6 or later, or to any version above the affected versions in the 5.4.x and 5.3.x series.
Which versions of PHP are affected by CVE-2013-6712?
CVE-2013-6712 affects PHP versions prior to 5.5.6 as well as specific versions within the 5.4.x and 5.3.x series.
Can CVE-2013-6712 be exploited remotely?
Yes, CVE-2013-6712 can be exploited remotely by attackers using crafted interval specifications.
What kind of impact can CVE-2013-6712 have on my system?
The impact of CVE-2013-6712 is a potential denial of service condition that could lead to application crashes due to memory issues.