{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2014-12-31T00:00:00", "descriptions": [{"lang": "en", "value": "sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not properly consider the mapping's length during processing of an invalid file that begins with a # character and lacks a newline character, which causes an out-of-bounds read and might (1) allow remote attackers to obtain sensitive information from php-cgi process memory by leveraging the ability to upload a .php file or (2) trigger unexpected code execution if a valid PHP script is present in memory locations adjacent to the mapping."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2016-12-29T18:57:01", "orgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5", "shortName": "debian"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://bugs.php.net/bug.php?id=68618"}, {"name": "MDVSA-2015:032", "tags": ["vendor-advisory", "x_refsource_MANDRIVA"], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:032"}, {"name": "HPSBMU03409", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://marc.info/?l=bugtraq&m=144050155601375&w=2"}, {"name": "SUSE-SU-2015:0365", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html"}, {"name": "APPLE-SA-2015-09-30-3", "tags": ["vendor-advisory", "x_refsource_APPLE"], "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"}, {"name": "[oss-security] 20150103 Re: CVE Request: PHP: out of bounds read crashes php-cgi", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://openwall.com/lists/oss-security/2015/01/03/4"}, {"name": "HPSBMU03380", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://marc.info/?l=bugtraq&m=143748090628601&w=2"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"}, {"name": "[oss-security] 20141231 Re: CVE Request: PHP: out of bounds read crashes php-cgi", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://openwall.com/lists/oss-security/2014/12/31/6"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=f9ad3086693fce680fbe246e4a45aa92edd2ac35"}, {"name": "openSUSE-SU-2015:0325", "tags": ["vendor-advisory", "x_refsource_SUSE"], "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html"}, {"name": "71833", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/71833"}, {"tags": ["x_refsource_CONFIRM"], "url": "https://support.apple.com/HT205267"}, {"name": "[oss-security] 20141231 Re: CVE Request: PHP: out of bounds read crashes php-cgi", "tags": ["mailing-list", "x_refsource_MLIST"], "url": "http://openwall.com/lists/oss-security/2015/01/01/1"}, {"name": "RHSA-2015:1053", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"}, {"name": "GLSA-201503-03", "tags": ["vendor-advisory", "x_refsource_GENTOO"], "url": "https://security.gentoo.org/glsa/201503-03"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://advisories.mageia.org/MGASA-2015-0040.html"}, {"name": "RHSA-2015:1066", "tags": ["vendor-advisory", "x_refsource_REDHAT"], "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@debian.org", "ID": "CVE-2014-9427", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not properly consider the mapping's length during processing of an invalid file that begins with a # character and lacks a newline character, which causes an out-of-bounds read and might (1) allow remote attackers to obtain sensitive information from php-cgi process memory by leveraging the ability to upload a .php file or (2) trigger unexpected code execution if a valid PHP script is present in memory locations adjacent to the mapping."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://bugs.php.net/bug.php?id=68618", "refsource": "CONFIRM", "url": "https://bugs.php.net/bug.php?id=68618"}, {"name": "MDVSA-2015:032", "refsource": "MANDRIVA", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:032"}, {"name": "HPSBMU03409", "refsource": "HP", "url": "http://marc.info/?l=bugtraq&m=144050155601375&w=2"}, {"name": "SUSE-SU-2015:0365", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html"}, {"name": "APPLE-SA-2015-09-30-3", "refsource": "APPLE", "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"}, {"name": "[oss-security] 20150103 Re: CVE Request: PHP: out of bounds read crashes php-cgi", "refsource": "MLIST", "url": "http://openwall.com/lists/oss-security/2015/01/03/4"}, {"name": "HPSBMU03380", "refsource": "HP", "url": "http://marc.info/?l=bugtraq&m=143748090628601&w=2"}, {"name": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html", "refsource": "CONFIRM", "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"}, {"name": "[oss-security] 20141231 Re: CVE Request: PHP: out of bounds read crashes php-cgi", "refsource": "MLIST", "url": "http://openwall.com/lists/oss-security/2014/12/31/6"}, {"name": "http://git.php.net/?p=php-src.git;a=commit;h=f9ad3086693fce680fbe246e4a45aa92edd2ac35", "refsource": "CONFIRM", "url": "http://git.php.net/?p=php-src.git;a=commit;h=f9ad3086693fce680fbe246e4a45aa92edd2ac35"}, {"name": "openSUSE-SU-2015:0325", "refsource": "SUSE", "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html"}, {"name": "71833", "refsource": "BID", "url": "http://www.securityfocus.com/bid/71833"}, {"name": "https://support.apple.com/HT205267", "refsource": "CONFIRM", "url": "https://support.apple.com/HT205267"}, {"name": "[oss-security] 20141231 Re: CVE Request: PHP: out of bounds read crashes php-cgi", "refsource": "MLIST", "url": "http://openwall.com/lists/oss-security/2015/01/01/1"}, {"name": "RHSA-2015:1053", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"}, {"name": "GLSA-201503-03", "refsource": "GENTOO", "url": "https://security.gentoo.org/glsa/201503-03"}, {"name": "http://advisories.mageia.org/MGASA-2015-0040.html", "refsource": "CONFIRM", "url": "http://advisories.mageia.org/MGASA-2015-0040.html"}, {"name": "RHSA-2015:1066", "refsource": "REDHAT", "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"}]}}}}, "cveMetadata": {"assignerOrgId": "79363d38-fa19-49d1-9214-5f28da3f3ac5", "assignerShortName": "debian", "cveId": "CVE-2014-9427", "datePublished": "2015-01-03T02:00:00", "dateReserved": "2014-12-31T00:00:00", "dateUpdated": "2016-12-29T18:57:01", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:php:php:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "92647629-083F-4042-8365-4AD2EBC9C1BF", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:2.0:*:*:*:*:*:*:*", "matchCriteriaId": "FF72E8D5-9F8C-4BD4-9AA4-28E23CB48A47", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:2.0b10:*:*:*:*:*:*:*", "matchCriteriaId": "83BE1120-6370-4470-8586-6581EDF3FD69", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*", "matchCriteriaId": "245C601D-0FE7-47E3-8304-6FF45E9567D6", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "691BB8BB-329A-4640-B758-7590C99B5E42", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "E2BC4CCE-2774-463E-82EA-36CD442D3A7B", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "C478024C-2FCD-463F-A75E-E04660AA9DF1", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "A5BD99C0-E875-496E-BE5E-A8DCBD414B5C", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "1851ADE5-C70C-46E0-941A-6ADF7DB5C126", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "69DA3BA2-AF53-4C9D-93FA-0317841595B1", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*", "matchCriteriaId": "FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*", "matchCriteriaId": "67B59D6A-7EDA-4C34-81D6-C2557C85D164", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*", "matchCriteriaId": "AEBA40B6-8FDF-41AA-8166-F491FF7F3118", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*", "matchCriteriaId": "E74E2B72-A428-4BB3-B6F8-0AF5E487A807", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*", "matchCriteriaId": "1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*", "matchCriteriaId": "945FF149-3446-4905-BCA1-C397E3497B58", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*", "matchCriteriaId": "8E446DBD-FEFA-4D22-9C9D-51F61C01E414", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*", "matchCriteriaId": "3C8DE728-78E1-4F9F-BC56-CD9B10E61287", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*", "matchCriteriaId": "80E31CC6-9356-4BB7-9F49-320AAF341E1E", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*", "matchCriteriaId": "1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*", "matchCriteriaId": "4B3E7199-8FB7-4930-9C0A-A36A698940B3", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*", "matchCriteriaId": "AEEF2298-98E8-409F-9205-84817CEF947B", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*", "matchCriteriaId": "6AFC00BA-D64D-4407-AC69-FDD9FF013943", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*", "matchCriteriaId": "D80F2A8B-B57F-4970-867A-55E8187C1502", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*", "matchCriteriaId": "EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*", "matchCriteriaId": "49965B80-DC27-4864-BDF0-CBBFF16BFD80", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "7BF57C14-86B6-419A-BAFF-93D01CB1E081", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "78BAA18C-E5A0-4210-B64B-709BBFF31EEC", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "13A159B4-B847-47DE-B7F8-89384E6C551B", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "57B59616-A309-40B4-94B1-50A7BC00E35C", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "0F39A1B1-416E-4436-8007-733B66904A14", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*", "matchCriteriaId": "FC2E5F96-66D2-4F99-A74D-6A2305EE218E", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*", "matchCriteriaId": "2D724D09-0D45-4701-93C9-348301217C8C", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "6713614A-B14E-4A85-BF89-ED780068FC68", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "FD95F8EB-B428-4B3C-9254-A5DECE03A989", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "069EB7EE-06B9-454F-9007-8DE5DCA33C53", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "18BF5BE6-09EA-45AD-93BF-2BEF1742534E", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "EC1460DF-1687-4314-BF1A-01290B20302D", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "470380B0-3982-48FC-871B-C8B43C81900D", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "63190D9B-7958-4B93-87C6-E7D5A572F6DC", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "4AAF4586-74FF-47C6-864B-656FDF3F33D0", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*", "matchCriteriaId": "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*", "matchCriteriaId": "5245F990-B4A7-4ED8-909D-B8137CE79FAA", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*", "matchCriteriaId": "5652D5B0-68E4-4239-B9B7-599AFCF4C53E", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*", "matchCriteriaId": "57B71BB7-5239-4860-9100-8CABC3992D8C", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*", "matchCriteriaId": "72BD447A-4EED-482C-8F61-48FAD4FCF8BA", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*", "matchCriteriaId": "B3F9DF9D-15E5-4387-ABE3-A7583331A928", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*", "matchCriteriaId": "11579E5C-D7CF-46EE-B015-5F4185C174E7", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*", "matchCriteriaId": "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*", "matchCriteriaId": "221B9AC4-C63C-4386-B3BD-E4BC102C6124", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "2BEA491B-77FD-4760-8F6F-3EBC6BD810D9", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "BB25CFBB-347C-479E-8853-F49DD6CBD7D4", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "4D2937B3-D034-400E-84F5-33833CE3764D", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*", "matchCriteriaId": "71AEE8B4-FCF8-483B-8D4C-2E80A02E925E", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*", "matchCriteriaId": "4C2AF1D9-33B6-4B2C-9269-426B6B720164", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*", "matchCriteriaId": "84B70263-37AA-4539-A286-12038A3792C6", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.4.7:*:*:*:*:*:*:*", "matchCriteriaId": "2E46E4B4-808C-4B47-81D9-EC2B02A5E57B", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.4.8:*:*:*:*:*:*:*", "matchCriteriaId": "6FF30D7F-353B-4496-9A89-4EF2BB279E0A", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:4.4.9:*:*:*:*:*:*:*", "matchCriteriaId": "DD97DF34-35AB-4979-96E2-B23DC8556A79", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "7007E77F-60EF-44D8-9676-15B59DF1325F", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*", "matchCriteriaId": "E727CECE-E452-489A-A42F-5A069D6AF80E", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*", "matchCriteriaId": "149A1FB8-593E-412B-8E1C-3E560301D500", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*", "matchCriteriaId": "5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*", "matchCriteriaId": "8FC144FA-8F84-44C0-B263-B639FEAD20FB", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "295907B4-C3DE-4021-BE3B-A8826D4379E6", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "B881352D-954E-4FC0-9E42-93D02A3F3089", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*", "matchCriteriaId": "74E7AE59-1CB0-4300-BBE0-109F909789EF", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*", "matchCriteriaId": "9222821E-370F-4616-B787-CC22C2F4E7CD", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*", "matchCriteriaId": "9809449F-9A76-4318-B233-B4C2950A6EA9", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*", "matchCriteriaId": "0AA962D4-A4EC-4DC3-B8A9-D10941B92781", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "F8CDFEF9-C367-4800-8A2F-375C261FAE55", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "16E43B88-1563-4EFD-9267-AE3E8C35D67A", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*", "matchCriteriaId": "11E5715F-A8BC-49EF-836B-BB78E1BC0790", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*", "matchCriteriaId": "5FA68843-158E-463E-B68A-1ACF041C4E10", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*", "matchCriteriaId": "1874F637-77E2-4C4A-BF92-AEE96A60BFB0", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*", "matchCriteriaId": "9592B32E-55CD-42D0-901E-8319823BC820", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*", "matchCriteriaId": "A9BF34B5-F74C-4D56-9841-42452D60CB87", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "CD02D837-FD28-4E0F-93F8-25E8D1C84A99", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*", "matchCriteriaId": "88358D1E-BE6F-4CE3-A522-83D1FA4739E3", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*", "matchCriteriaId": "D8B97B03-7DA7-4A5F-89B4-E78CAB20DE17", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*", "matchCriteriaId": "86767200-6C9C-4C3E-B111-0E5BE61E197B", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*", "matchCriteriaId": "B00B416D-FF23-4C76-8751-26D305F0FA0F", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*", "matchCriteriaId": "CCB6CDDD-70D3-4004-BCE0-8C4723076103", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*", "matchCriteriaId": "A782CA26-9C38-40A8-92AE-D47B14D2FCE3", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*", "matchCriteriaId": "1C0E7E2A-4770-4B68-B74C-5F5A6E1876DC", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*", "matchCriteriaId": "0892C89E-9389-4452-B7E0-981A763CD426", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.2.9:*:*:*:*:*:*:*", "matchCriteriaId": "635F3CB1-B042-43CC-91AB-746098018D8C", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.2.10:*:*:*:*:*:*:*", "matchCriteriaId": "E1F32DDF-17A3-45B5-9227-833EBEBD3923", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.2.11:*:*:*:*:*:*:*", "matchCriteriaId": "2CDFB7E9-8510-430F-BFBC-FD811D60DC78", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.2.12:*:*:*:*:*:*:*", "matchCriteriaId": "79D5336A-14AA-483E-9CBE-A7B53120B925", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.2.13:*:*:*:*:*:*:*", "matchCriteriaId": "3AADA875-E0EA-483A-A07E-2914FE969972", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.2.14:*:*:*:*:*:*:*", "matchCriteriaId": "95D48A71-B84E-4B6C-9603-B3373052E568", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.2.15:*:*:*:*:*:*:*", "matchCriteriaId": "CAAB7D55-F155-43F9-A563-F2E35CFFEF26", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.2.16:*:*:*:*:*:*:*", "matchCriteriaId": "72243A3F-6BFD-472B-9EA4-82BE4253ED27", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.2.17:*:*:*:*:*:*:*", "matchCriteriaId": "E415CC22-09CA-47D2-9F1A-0BCA8960835B", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:*", "matchCriteriaId": "9EF4B938-BB14-4C06-BEE9-10CA755C5DEF", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "981C922C-7A7D-473E-8C43-03AB62FB5B8B", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "5D0CD11A-09C2-4C60-8F0C-68E55BD6EE63", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.3:*:*:*:*:*:*:*", "matchCriteriaId": "B0F40E4A-E125-4099-A8B3-D42614AA9312", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.4:*:*:*:*:*:*:*", "matchCriteriaId": "4933D9DD-A630-4A3D-9D13-9E182F5F6F8C", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.5:*:*:*:*:*:*:*", "matchCriteriaId": "A9E6D530-91FC-42F4-A427-6601238E0187", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.6:*:*:*:*:*:*:*", "matchCriteriaId": "9EC938DB-E066-407F-BDF8-61A1C41136F7", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.7:*:*:*:*:*:*:*", "matchCriteriaId": "ACDF768D-7F5A-4042-B7DD-398F65F3F094", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.8:*:*:*:*:*:*:*", "matchCriteriaId": "2AF35BB6-C6B1-4683-A8BE-AA72CC34F5B5", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.9:*:*:*:*:*:*:*", "matchCriteriaId": "EC3F1891-032D-409C-904C-A415D2323DFC", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.10:*:*:*:*:*:*:*", "matchCriteriaId": "4B13826D-06B2-4A46-AB24-092F6935958D", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.11:*:*:*:*:*:*:*", "matchCriteriaId": "1B6528FC-51BE-4E30-B282-D9841553BA26", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.12:*:*:*:*:*:*:*", "matchCriteriaId": "66CF9452-6225-4726-822B-C7CD620A1D6E", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.13:*:*:*:*:*:*:*", "matchCriteriaId": "A953FF53-1106-42D3-BE4A-4F27C7C42F52", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.14:*:*:*:*:*:*:*", "matchCriteriaId": "D4D2F015-A38D-43C6-ADC6-A0EFCE150071", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.15:*:*:*:*:*:*:*", "matchCriteriaId": "75A8FF8E-A26A-45AD-BD91-9B4822581CE2", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.16:*:*:*:*:*:*:*", "matchCriteriaId": "5F27C2F9-73BE-46EF-B5ED-8D407D22D12E", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.17:*:*:*:*:*:*:*", "matchCriteriaId": "EB212796-B71B-4F6B-9156-9C5178FF0931", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.18:*:*:*:*:*:*:*", "matchCriteriaId": "DFBCD79D-3821-4538-B6F1-49F51E5983E3", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.19:*:*:*:*:*:*:*", "matchCriteriaId": "B66E709F-E34E-4744-8970-0F70F95A8761", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.20:*:*:*:*:*:*:*", "matchCriteriaId": "D20691D0-3102-4E82-BED9-9E7B67F9F778", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.21:*:*:*:*:*:*:*", "matchCriteriaId": "6DA7831F-5F53-4A29-9AB1-913EBD095589", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.22:*:*:*:*:*:*:*", "matchCriteriaId": "F798EC96-FC60-47BA-AE27-8C2261D9E5D8", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.23:*:*:*:*:*:*:*", "matchCriteriaId": "633BEAF3-C73C-48FC-B623-375B9F79C93D", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.24:*:*:*:*:*:*:*", "matchCriteriaId": "965BB50E-7675-43A7-B074-98BCB1EBA311", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.25:*:*:*:*:*:*:*", "matchCriteriaId": "B52F6124-1C8E-4568-BACF-A463064DA48E", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.26:*:*:*:*:*:*:*", "matchCriteriaId": "2BA2F96C-A676-4F13-8E41-600461338B1A", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.27:*:*:*:*:*:*:*", "matchCriteriaId": "E0FE5746-FA0B-493A-B3A9-DE2A153C5ECA", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.3.28:*:*:*:*:*:*:*", "matchCriteriaId": "D3E07192-DC26-4B67-A667-2D9C3878BB29", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.0:*:*:*:*:*:*:*", "matchCriteriaId": "E7B9B8D2-78B7-4B17-955B-741C7A6F6634", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.1:*:*:*:*:*:*:*", "matchCriteriaId": "5CA2A940-BD69-4D35-AF12-432CB929248B", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.2:*:*:*:*:*:*:*", "matchCriteriaId": "29BD13F9-86C8-44C4-A860-9A87870A518E", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.3:*:*:*:*:*:*:*", "matchCriteriaId": "1B361FDE-9F6A-4E9A-96F1-619DC56EECB6", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.10:*:*:*:*:*:*:*", "matchCriteriaId": "77A4B7E0-C872-4E53-AD72-1BB2755E4FDA", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.11:*:*:*:*:*:*:*", "matchCriteriaId": "EECCD553-53D5-485E-8C21-E2A5070833B2", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.12:*:*:*:*:*:*:*", "matchCriteriaId": "95357C79-A754-4E0C-B65B-0FA241962B12", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.12:rc1:*:*:*:*:*:*", "matchCriteriaId": "25EAF9A9-F7A1-4AC7-BCFD-769BE0FDB537", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.12:rc2:*:*:*:*:*:*", "matchCriteriaId": "74EA8037-7C22-48B3-9FA2-4BFFFFD513D1", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.13:*:*:*:*:*:*:*", "matchCriteriaId": "C8D1254E-0C72-4958-BA7F-5B818C3ACB15", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.13:rc1:*:*:*:*:*:*", "matchCriteriaId": "92994FFC-F362-48AC-9CA8-8EBCAC880C91", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.14:*:*:*:*:*:*:*", "matchCriteriaId": "21131DF1-1EE5-4C84-B1E0-FA75BC39B344", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.14:rc1:*:*:*:*:*:*", "matchCriteriaId": "0B23F85D-465B-4176-9798-E78AADE421EC", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.15:rc1:*:*:*:*:*:*", "matchCriteriaId": "ADEE52B4-8392-4321-8C00-FABA6270E728", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.16:rc1:*:*:*:*:*:*", "matchCriteriaId": "57D74F58-DB3A-4A70-93CF-B350DB65EF49", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.17:*:*:*:*:*:*:*", "matchCriteriaId": "AAEE86A0-C3FC-446E-8DF0-4FA32F741E1B", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.18:*:*:*:*:*:*:*", "matchCriteriaId": "90B670B6-A211-40C6-A8A0-1B0188EF891F", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.19:*:*:*:*:*:*:*", "matchCriteriaId": "AAAC4776-F3FF-42D8-AC6E-4746987D30BF", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.20:*:*:*:*:*:*:*", "matchCriteriaId": "41DC16B7-7A45-4BDE-B340-F17D97CA3BDD", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.21:*:*:*:*:*:*:*", "matchCriteriaId": "0FD7C2E6-9B34-4890-A0D1-39BB8ECA47E4", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.22:*:*:*:*:*:*:*", "matchCriteriaId": "4F8F72EC-7431-4B36-89EF-E7593ACFBFEA", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.23:*:*:*:*:*:*:*", "matchCriteriaId": "86E9AC84-430D-4FDA-8FFE-B77E17803A11", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.24:*:*:*:*:*:*:*", "matchCriteriaId": "5238A7AE-D3FD-4465-95D7-F9C8787F9463", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.25:*:*:*:*:*:*:*", "matchCriteriaId": "6B877725-43E7-479E-9FA3-6D2FFE89B620", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.26:*:*:*:*:*:*:*", "matchCriteriaId": "AB33BBC0-9D17-4369-A52D-B4B65150380A", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.27:*:*:*:*:*:*:*", "matchCriteriaId": "95E112B5-12CC-40D5-AA1E-B5FB1ABC831E", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.28:*:*:*:*:*:*:*", "matchCriteriaId": "B078B1E5-14BD-4004-8384-4656E1063EC0", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.29:*:*:*:*:*:*:*", "matchCriteriaId": "27BB02F3-99A1-428C-A3C9-614B1277C88D", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.30:*:*:*:*:*:*:*", "matchCriteriaId": "42873F3E-55BA-4CF3-BA13-13E49E59C363", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.34:*:*:*:*:*:*:*", "matchCriteriaId": "0A8F6ABB-9F55-435A-B249-6449970F5DB7", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.35:*:*:*:*:*:*:*", "matchCriteriaId": "E840B9E2-0B9E-4BA7-B635-022DB695632F", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.4.36:*:*:*:*:*:*:*", "matchCriteriaId": "AE53604B-82C6-4DF6-A023-07555C068259", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.0:*:*:*:*:*:*:*", "matchCriteriaId": "9F6D9B19-E64D-4BED-9194-17460CE19E6F", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.0:alpha1:*:*:*:*:*:*", "matchCriteriaId": "3D25E591-448C-4E3B-8557-6E48F7571796", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.0:alpha2:*:*:*:*:*:*", "matchCriteriaId": "6DA18F3F-B4B5-40C3-BF19-67C1F0C1787D", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.0:alpha3:*:*:*:*:*:*", "matchCriteriaId": "3AF783C9-26E7-4E02-BD41-77B9783667E3", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.0:alpha4:*:*:*:*:*:*", "matchCriteriaId": "EF49701D-ECE4-4CEB-BDAB-24C09C8AD4B4", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.0:alpha5:*:*:*:*:*:*", "matchCriteriaId": "7AEDF6F7-001D-4A35-A26F-417991AD377F", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.0:alpha6:*:*:*:*:*:*", "matchCriteriaId": "4031DB99-B4B4-41EC-B3C1-543D92C575A9", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.0:beta1:*:*:*:*:*:*", "matchCriteriaId": "D5450EA7-A398-49D2-AA8E-7C95B074BAB1", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.0:beta2:*:*:*:*:*:*", "matchCriteriaId": "04FE0E4E-BC94-4DC9-BE9B-DC57B952B2FB", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.0:beta3:*:*:*:*:*:*", "matchCriteriaId": "BB8E09D8-9CBE-4279-88B7-24A214A5A537", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.0:beta4:*:*:*:*:*:*", "matchCriteriaId": "2D41ECCE-887D-49A2-9BB3-B559495AC55B", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "79B418BC-27F4-4443-A0F7-FF4ADA568C1B", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "8EEBDF62-BA1B-4438-9AEA-8B56AA5713E8", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "F644EA6C-50C6-4A1C-A4AC-287AA9477B46", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.2:*:*:*:*:*:*:*", "matchCriteriaId": "4DD47F30-74F5-48E8-8657-C2373FE2BD22", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.3:*:*:*:*:*:*:*", "matchCriteriaId": "0C09527B-6B47-41F8-BDE6-01C47E452286", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.4:*:*:*:*:*:*:*", "matchCriteriaId": "2E454D87-23CB-4D7F-90FE-942EE54D661F", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.5:*:*:*:*:*:*:*", "matchCriteriaId": "1031E646-F2CF-4A3E-8E6A-5D4BC950BEDA", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.6:*:*:*:*:*:*:*", "matchCriteriaId": "130E50C1-D209-4CFF-9399-69D561340FBB", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.7:*:*:*:*:*:*:*", "matchCriteriaId": "C1F29948-9417-460B-8B04-D91AE4E8B423", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.8:*:*:*:*:*:*:*", "matchCriteriaId": "A37D00C1-4F41-4400-9CE4-8E8BAA3E4142", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.9:*:*:*:*:*:*:*", "matchCriteriaId": "093D08B7-CC3C-4616-8697-F15B253A7D9A", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.10:*:*:*:*:*:*:*", "matchCriteriaId": "E9CD8FEE-DE7B-47CB-9985-4092BFA071D0", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.11:*:*:*:*:*:*:*", "matchCriteriaId": "A30B2D9E-F289-43C9-BFBC-1CEF284A417E", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.12:*:*:*:*:*:*:*", "matchCriteriaId": "FE41CFDF-8ECD-41C1-94A7-5AFD42C5DDEA", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.13:*:*:*:*:*:*:*", "matchCriteriaId": "6AEAC9BA-AF82-4345-839C-D339DCB962A7", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.14:*:*:*:*:*:*:*", "matchCriteriaId": "1EFE682F-52E3-48EC-A993-F522FC29712F", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.18:*:*:*:*:*:*:*", "matchCriteriaId": "AC63A449-5D92-4F5F-8186-B58FFFBA54FE", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.19:*:*:*:*:*:*:*", "matchCriteriaId": "F18236F6-2065-4A6A-93E7-FD90E650C689", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.5.20:*:*:*:*:*:*:*", "matchCriteriaId": "DEFBA84A-A4E4-438B-B9B5-8549809DCECC", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.6.0:alpha1:*:*:*:*:*:*", "matchCriteriaId": "5BF4E8FF-A3EC-43E8-A0C1-FD38AFCB77B8", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.6.0:alpha2:*:*:*:*:*:*", "matchCriteriaId": "54ADECFC-3C07-43BC-B296-6C25AC7F1C95", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.6.0:alpha3:*:*:*:*:*:*", "matchCriteriaId": "FE192054-2FBB-4388-A52A-422E20DEA2D7", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.6.0:alpha4:*:*:*:*:*:*", "matchCriteriaId": "F0195D48-3B42-4AC0-B9C5-436E01C63879", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.6.0:alpha5:*:*:*:*:*:*", "matchCriteriaId": "BF0E5D67-ABC1-41A5-94E1-7DD3CDB51D81", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.6.0:beta1:*:*:*:*:*:*", "matchCriteriaId": "319E0573-B1AD-40B6-B4BC-8BE67ED3EFDB", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.6.0:beta2:*:*:*:*:*:*", "matchCriteriaId": "1A7C00EB-87B7-4EB7-A4AC-8665D8C78467", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.6.0:beta3:*:*:*:*:*:*", "matchCriteriaId": "21BFCF10-786A-4D1E-9C37-50A1EC6056F1", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.6.0:beta4:*:*:*:*:*:*", "matchCriteriaId": "95A6D6C8-5F46-4897-A0B0-778631E8CE6A", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.6.2:*:*:*:*:*:*:*", "matchCriteriaId": "AE18933A-5FE6-41C7-B1B6-DA3E762C3FB6", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.6.3:*:*:*:*:*:*:*", "matchCriteriaId": "9AE1289F-03A6-4621-B387-5F5ADAC4AE92", "vulnerable": true}, {"criteria": "cpe:2.3:a:php:php:5.6.4:*:*:*:*:*:*:*", "matchCriteriaId": "383697F5-D29E-475A-84F3-46B54A928889", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "sapi/cgi/cgi_main.c in the CGI component in PHP through 5.4.36, 5.5.x through 5.5.20, and 5.6.x through 5.6.4, when mmap is used to read a .php file, does not properly consider the mapping's length during processing of an invalid file that begins with a # character and lacks a newline character, which causes an out-of-bounds read and might (1) allow remote attackers to obtain sensitive information from php-cgi process memory by leveraging the ability to upload a .php file or (2) trigger unexpected code execution if a valid PHP script is present in memory locations adjacent to the mapping."}, {"lang": "es", "value": "sapi/cgi/cgi_main.c en el componente CGI en PHP hasta 5.4.36, 5.5.x hasta 5.5.20, y 5.6.x hasta 5.6.4, cuando mmap est\u00e1 utilizado para leer un fichero .php, no considera correctamente la longitud de las asignaciones durante el procesamiento de un fichero inv\u00e1lido que empieza por un caracter # y le falta un caracter nueva l\u00ednea, lo que causa una lectura fuera de rango y podr\u00eda (1) permitir a atacantes remotos obtener informaci\u00f3n sensible de la memoria de procesos php-cgi mediante el aprovechamiento de la habilidad de subir un fichero .php o (2) provocar la ejecuci\u00f3n de c\u00f3digo no esperado si una secuencia de comandos PHP v\u00e1lida est\u00e1 presente en las localizaciones de memoria ajuntas a las asignaciones."}], "id": "CVE-2014-9427", "lastModified": "2023-11-07T02:23:05.237", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2015-01-03T02:59:00.050", "references": [{"source": "security@debian.org", "url": "http://advisories.mageia.org/MGASA-2015-0040.html"}, {"source": "security@debian.org", "url": "http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=f9ad3086693fce680fbe246e4a45aa92edd2ac35"}, {"source": "security@debian.org", "url": "http://lists.apple.com/archives/security-announce/2015/Sep/msg00008.html"}, {"source": "security@debian.org", "url": "http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00029.html"}, {"source": "security@debian.org", "url": "http://lists.opensuse.org/opensuse-updates/2015-02/msg00079.html"}, {"source": "security@debian.org", "url": "http://marc.info/?l=bugtraq&m=143748090628601&w=2"}, {"source": "security@debian.org", "url": "http://marc.info/?l=bugtraq&m=144050155601375&w=2"}, {"source": "security@debian.org", "url": "http://openwall.com/lists/oss-security/2014/12/31/6"}, {"source": "security@debian.org", "url": "http://openwall.com/lists/oss-security/2015/01/01/1"}, {"source": "security@debian.org", "url": "http://openwall.com/lists/oss-security/2015/01/03/4"}, {"source": "security@debian.org", "url": "http://rhn.redhat.com/errata/RHSA-2015-1053.html"}, {"source": "security@debian.org", "url": "http://rhn.redhat.com/errata/RHSA-2015-1066.html"}, {"source": "security@debian.org", "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2015:032"}, {"source": "security@debian.org", "url": "http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html"}, {"source": "security@debian.org", "url": "http://www.securityfocus.com/bid/71833"}, {"source": "security@debian.org", "tags": ["Exploit"], "url": "https://bugs.php.net/bug.php?id=68618"}, {"source": "security@debian.org", "url": "https://security.gentoo.org/glsa/201503-03"}, {"source": "security@debian.org", "url": "https://support.apple.com/HT205267"}], "sourceIdentifier": "security@debian.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}