NetSight
IP …
critical9.8

CVE-2015-4603

The exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to…

Impact

The exception::getTraceAsString function in Zend/zend_exceptions.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to execute arbitrary code via an unexpected data type, related to a "type confusion" issue.

Affected products

VendorProductAffected versions
PhpPhp
through 5.4.39
Versions 5.5.0, 5.5.1, 5.5.2, 5.5.3, 5.5.4
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Hpc Node
Version 7.0
RedhatEnterprise Linux Hpc Node Eus
Version 7.1
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Server Eus
Version 7.1
RedhatEnterprise Linux Workstation
Version 7.0
RedhatEnterprise Linux
Versions 6.0, 7.0

References