PHP CVEs

Description

The escapeshellarg function in ext/standard/exec.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 on Windows allows remote attackers to execute arbitrary OS commands via a crafted string to an application that accepts command-line arguments for a call to the PHP system function.

Affected products and versions

• PHP — Up to and including 5.4.41
• PHP versions 5.5.0, 5.5.1, 5.5.2, 5.5.3, 5.5.4, 5.5.5, 5.5.6, 5.5.7, 5.5.8, 5.5.9, 5.5.10, 5.5.11, 5.5.12, 5.5.13, 5.5.14, 5.5.15, 5.5.16, 5.5.17, 5.5.18, 5.5.19, 5.5.20, 5.5.21, 5.5.22, 5.5.23, 5.5.24, 5.5.25, 5.6.0, 5.6.1, 5.6.2, 5.6.3, 5.6.4, 5.6.5, 5.6.6, 5.6.7, 5.6.8, 5.6.9

References

• git.php.net http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=d2ac264ffea5ca2e85640b6736e0c7cd4ee9a4a9
• openwall.com http://openwall.com/lists/oss-security/2015/06/18/6
• php.net http://php.net/ChangeLog-5.php
• www.securityfocus.com http://www.securityfocus.com/bid/75290
• www.securitytracker.com http://www.securitytracker.com/id/1032709
• bugs.php.net https://bugs.php.net/bug.php?id=69646 Exploit
• security.gentoo.org https://security.gentoo.org/glsa/201606-10
• nvd.nist.gov Official NVD record