PCI Vulnerability CVE Reference: CVE-2014-4049 Patched

CVE Reference: CVE-2014-4049 reported 6/13/2014.

A malicious server or man-in-the-middle attacker could possibly use this flaw to execute arbitrary code as the PHP interpreter if a PHP application uses dns_get_record() to perform a DNS query.

Heap-based buffer overflow in the php_parserr function in ext/standard/dns.c in PHP 5.6.0beta4 and earlier allows remote servers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DNS TXT record, related to the dns_get_record function.

CVE-2014-4049 – Secunia Advisory: SA59270 has been patched on all of our servers.

PRO-Webs Support

Facebook Message for Zen Cart
May 10, 2018

PayPal Removal of RC4-based ciphers from the Payflow environment
March 21, 2018

Additional Images Uploader for Zen Cart
February 20, 2018

PayPal / Payflow changes to IP addresses
August 17, 2017

CVE-2017-1000364
June 23, 2017

4-12-2017-5.2.21 Security Patch PHPMailer Zen Cart 1.3.x-1.5.5
April 13, 2017