blogsafe.org My Downloads

BlogSafe.org

PHP CVEs

Vulnerabilities in the PHP language itself, and which PHP versions they affect.

← Back to CVE list

CVE-2014-8626

HIGH 7.5 CVSS 2.0
Published
November 23, 2014
Last modified
June 17, 2026
NVD status
Modified
Reported by
secalert@redhat.com
Weakness
CWE-119
CVSS vector
AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Stack-based buffer overflow in the date_from_ISO8601 function in ext/xmlrpc/libxmlrpc/xmlrpc.c in PHP before 5.2.7 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by including a timezone field in a date, leading to improper XML-RPC encoding.

Affected products and versions

  • PHP — Up to and including 5.2.6
  • PHP versions 5.2.0, 5.2.1, 5.2.2, 5.2.3, 5.2.4, 5.2.5

References