Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Thu, 30 Jul 2015 13:16:38 +0200
From: Fourny Dimitri <>
Subject: CVE Request: PHP v7 - Code execution vulnerability


An arbitrary code execution is possible in the function str_ireplace()
with PHP 7.
The vulnerability is in the function php_string_tolower().



Could you please assign a CVE for this vulnerability? Thank you.

Regards, Dimitri Fourny.

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.