statement
The vulnerability can cause memory corruption, service disruption, and in some cases remote execution of malicious code via specially crafted compressed data.
A statement by Turan Security Xavfsizlik Byulleteni. Statements are as reported by the cited publishers — not verified by DecisionGateway.
Ushbu zaiflik maxsus tayyorlangan siqilgan ma’lumotlar orqali dastur xotirasining buzilishiga, xizmat faoliyatining izdan chiqishiga va ayrim holatlarda masofadan turib zararli kod bajarilishiga olib kelishi mumkin.
Discussion
Related claims
Two security flaws in PHP could allow attackers to execute malicious code remotely.THnewsupdates · allegationTwo critical vulnerabilities have been confirmed in PHP, distributed under the name PHP2Shell, and they create a risk of remote malicious code execution on the server and unauthorized access to data.Turan Security Xavfsizlik Byulleteni · allegationDue to a serious vulnerability in the WordPress system and the REST API mechanism, an attacker can remotely break into the server without any additional information (such as login-password) (RCE).turansecurity · statementThe vulnerability has a severity rating of Critical with a CVSS score of 10.0.Turan Security xavfsizlik byulleteni · statementExploit code has not yet been distributed, but the CVE is confirmed.turansecurity · statementThe flaws could potentially expose private data, passwords, and website servers.THnewsupdates · allegation