![Trend Micro Security](https://www.trendmicro.com/content/dam/trendmicro/global/en/global/logo/logo-desktop.png)
PHP cURL Lib NULL Byte Injection Vulnerability
2016年12月21日
危険度: : 緊急
概要
The php_handler function in sapi/apache2handler/sapi_apache2.c in PHP when the Apache HTTP Server 2.4.x is used, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via pipelined HTTP requests that result in a "deconfigured interpreter."
トレンドマイクロの対策
Apply associated Trend Micro DPI Rules.