NULL pointer dereference in PHP - CVE-2014-0236

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error. A remote attacker can trigger denial of service conditions via a zero root_storage value in a CDF file, related to cdf.c and readcdf.c.

Affected software

How to mitigate CVE-2014-0236

External References

• http://php.net/ChangeLog-5.php
• https://bugs.php.net/bug.php?id=67329
• http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=f3f22ff5c697aef854ffc1918bce708b37481b0f

Related Security Bulletins

• NULL pointer dereference in PHP