NetSight
IP …
high7.5

CVE-2016-10712

In PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3, all of the return values of stream_get_meta_data can be controlled if the input can be control…

Impact

In PHP before 5.5.32, 5.6.x before 5.6.18, and 7.x before 7.0.3, all of the return values of stream_get_meta_data can be controlled if the input can be controlled (e.g., during file uploads). For example, a "$uri = stream_get_meta_data(fopen($file, "r"))['uri']" call mishandles the case where $file is data:text/plain;uri=eviluri, -- in other words, metadata can be set by an attacker.

Affected products

VendorProductAffected versions
PhpPhp
through 5.5.31
from 5.6.0 through 5.6.17
from 7.0.0 through 7.0.2
CanonicalUbuntu Linux
Versions 14.04, 16.04, 17.10

Weakness classification

CWE-20

References