CVE-2017-5677: Critical severity PEAR Html Ajax vulnerability
Published Feb 6, 2017
·Updated
PEAR HTMLAJAX 0.3.0 through 0.5.7 has a PHP Object Injection Vulnerability in the PHP Serializer. It allows remote code execution. In one viewpoint, the root cause is an incorrect regular expression.
Affected Software
15 affected components
PEAR Html Ajax=0.3.0
PEAR Html Ajax=0.3.1
PEAR Html Ajax=0.3.2
PEAR Html Ajax=0.3.3
PEAR Html Ajax=0.3.4
PEAR Html Ajax=0.4.0
PEAR Html Ajax=0.4.1
PEAR Html Ajax=0.5.0
PEAR Html Ajax=0.5.1
PEAR Html Ajax=0.5.2
PEAR Html Ajax=0.5.3
PEAR Html Ajax=0.5.4
PEAR Html Ajax=0.5.5
PEAR Html Ajax=0.5.6
PEAR Html Ajax=0.5.7
Event History
Feb 6, 2017
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·06:59 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2017-5677?
CVE-2017-5677 is categorized as having a high severity due to its potential for remote code execution.
2
How do I fix CVE-2017-5677?
To fix CVE-2017-5677, upgrade PEAR HTML_AJAX to version 0.6.0 or later.
3
What versions are affected by CVE-2017-5677?
CVE-2017-5677 affects PEAR HTML_AJAX versions 0.3.0 through 0.5.7.
4
What type of vulnerability is CVE-2017-5677?
CVE-2017-5677 is a PHP Object Injection vulnerability that allows for remote code execution.
5
What is the root cause of CVE-2017-5677?
The root cause of CVE-2017-5677 is an incorrect regular expression in the PHP Serializer.