CVE Catalog

CVE-2016-5873

Critical
Published: Translated: NVD NIST

Summary

Buffer overflow in the HTTP URL parsing functions in pecl_http before 3.0.1 might allow remote attackers to execute arbitrary code via non-printable characters in a URL.

Risk Assessment

An attacker could exploit this vulnerability to execute arbitrary code remotely, posing a significant security risk to the system.

Recommendation

It is recommended to update pecl_http to version 3.0.1 or later to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

Buffer overflow in the HTTP URL parsing functions in pecl_http before 3.0.1 might allow remote attackers to execute arbitrary code via non-printable characters in a URL.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS