CVE-2016-1000004: Critical severity facebook hiphop virtual machine vulnerability
Insufficient type checks were employed prior to casting input data in SimpleXMLElementexportNode and simplexmlimportdom. This issue affects HHVM versions prior to 3.9.5, all versions between 3.10.0 and 3.12.3 (inclusive), and all versions between 3.13.0 and 3.14.1 (inclusive).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1000004?
The severity of CVE-2016-1000004 is critical with a severity value of 9.8.
Which versions of HHVM are affected by CVE-2016-1000004?
HHVM versions prior to 3.9.5, all versions between 3.10.0 and 3.12.3 (inclusive), and all versions between 3.13.0 and 3.14.1 (inclusive) are affected by CVE-2016-1000004.
What is the vulnerability description of CVE-2016-1000004?
CVE-2016-1000004 is a vulnerability where insufficient type checks were employed prior to casting input data in SimpleXMLElement_exportNode and simplexml_import_dom.
How can I fix CVE-2016-1000004?
To fix CVE-2016-1000004, update HHVM to version 3.9.5 or higher if using a version prior to 3.9.5, or update to a version between 3.12.3 and 3.14.1 (inclusive) if using a version between 3.10.0 and 3.12.3, or between 3.13.0 and 3.14.1.
What is the CWE of CVE-2016-1000004?
The CWE of CVE-2016-1000004 is CWE-345.