EDB-30395

PoC

PHP - 'openssl_x509_parse()' Memory Corruption

view exploit source exploit_dbtype dosauthor Stefan Esserpublished 2013-12-17catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2013-6420UShigh7.5Exploit
The asn1_time_to_time_t function in ext/openssl/openssl.c in PHP before 5.3.28, 5.4.x before 5.4.23, and 5.5.x before 5.5.7 does not properly parse (1) notBefore and (2) notAfter t…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan