CVE-2014-4698

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.5.14

Description The issue is related to a use-after-free vulnerability in the SPL component, specifically in the ext/spl/spl array.c file. This vulnerability can be exploited by context-dependent attackers to cause a denial of service or possibly have other unspecified impacts. The exploitation is possible via crafted ArrayIterator usage within applications in certain web-hosting environments.

Recommendations For PHP versions prior to 5.5.14, update to version 5.5.14 or later to resolve the issue. As a temporary workaround, consider restricting the use of the ArrayIterator in applications to minimize the risk of exploitation.