PHP security patch creates critical vulnerability

A bug in a security update to PHP 5.3.9 has created a critical vulnerability, potentially allowing hackers to inject and execute code remotely.

The security update was originally created to prevent Denial of Service attacks, but the method used by the developers potentially allows a hacker to inject malicious code through a buffer overflow.

While PHP have not issued an official advisory about the problem, they are aware of the problem and are currently developing a security update.

PHP is the scripting language that many popular content management systems, including WordPress, Joomla and Drupal, are written in.

• Your web developer should make themselves redundant
• Spam volumes fall 13% while malware on the rise: Report
• Malware attacking businesses through mobile social networks and WordPress platforms: AVG report
• Hacked WordPress websites spread Mac Flashback malware
• WordPress the dominant platform for leading blogs: Report