THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2019-11049 (MEDIUM 6.5) — In PHP versions 7.3.x below 7.3.13 and 7.4.0 on Windows, when supplying custom headers to mail() function, due to mistake introduced in commit 78f4b4a2dcf92ddbccea1bb95f8390a18ac3342e, if the header is supplied in lowercase, this can result in double-freeing certain memory locati

[NVD] CVE-2019-11049 (MEDIUM 6.5) — In PHP versions 7.3.x below 7.3.13 and 7.4.0 on Windows, when supplying custom headers to mail() function, due to mistake introduced in commit 78f4b4a2dcf92ddbccea1bb95f8390a18ac3342e, if the header is supplied in lowercase, this can result in double-freeing certain memory locati

lownvdPublished 2019-12-23

CVE-2019-11049 CVSS: 6.5 MEDIUM Published: 2019-12-23T03:15:11.897

In PHP versions 7.3.x below 7.3.13 and 7.4.0 on Windows, when supplying custom headers to mail() function, due to mistake introduced in commit 78f4b4a2dcf92ddbccea1bb95f8390a18ac3342e, if the header is supplied in lowercase, this can result in double-freeing certain memory locations.

Indicators of compromise

78f4b4a2dcf92ddbccea1bb95f8390a18ac3342esha1
CVE-2019-11049cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2019-11049