CVE-2017-5358

Critical

Published: 15/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Stack-based buffer overflows in php_Easycom5_3_0.dll in EasyCom for PHP 4.0.0.29 allow remote attackers to execute arbitrary code via the server argument to the (1) i5_connect, (2) i5_pconnect, or (3) i5_private_connect API function.

Risk Assessment

An attacker could exploit this vulnerability to execute arbitrary code remotely, potentially leading to system takeover or data leakage.

Recommendation

It is recommended to update to the latest version of EasyCom to mitigate this vulnerability and to monitor systems for unauthorized activities.

Original NVD description (English source)

Stack-based buffer overflows in php_Easycom5_3_0.dll in EasyCom for PHP 4.0.0.29 allows remote attackers to execute arbitrary code via the server argument to the (1) i5_connect, (2) i5_pconnect, or (3) i5_private_connect API function.