CVE-2017-11628

CVE-2017-11628 is a stack-based buffer overflow vulnerability affecting PHP versions before 5.6.31, 7.0.21, and 7.1.7. Specifically, it resides in the zend_ini_do_op() function within Zend/zend_ini_parser.c. This vulnerability is only exploitable in PHP applications that process untrusted input via parse_ini_string or parse_ini_file. Rated with a CVSS score of 7.8 (High), the vulnerability requires local access and user interaction, but has low attack complexity. Successful exploitation could lead to a denial of service or potentially arbitrary code execution, resulting in high impact to confidentiality, integrity, and availability. There is no evidence of active exploitation, nor are there publicly available exploits in Metasploit, Nuclei, or ExploitDB. The vulnerability has received minimal community discussion and media coverage, indicating a low level of public attention.