CVE-2016-7478

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-7478
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-7478.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2016-7478
Downstream
Related
Published
2017-01-11T06:59:00.130Z
Modified
2026-07-08T05:48:21.053440802Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

Zend/zend_exceptions.c in PHP, possibly 5.x before 5.6.28 and 7.x before 7.0.13, allows remote attackers to cause a denial of service (infinite loop) via a crafted Exception object in serialized data, a related issue to CVE-2015-8876.

Database specific 
{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "5.0.0-beta1"
                },
                {
                    "last_affected": "5.0.0-beta1"
                },
                {
                    "introduced": "5.0.0-beta2"
                },
                {
                    "last_affected": "5.0.0-beta2"
                },
                {
                    "introduced": "5.0.0-beta3"
                },
                {
                    "last_affected": "5.0.0-beta3"
                },
                {
                    "introduced": "5.0.0-beta4"
                },
                {
                    "last_affected": "5.0.0-beta4"
                },
                {
                    "introduced": "5.6.0-alpha4"
                },
                {
                    "last_affected": "5.6.0-alpha4"
                },
                {
                    "introduced": "5.6.0-alpha5"
                },
                {
                    "last_affected": "5.6.0-alpha5"
                }
            ],
            "source": "CPE_STRING",
            "vendor_product": "php:php",
            "cpes": [
                "cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*",
                "cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*",
                "cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*",
                "cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*",
                "cpe:2.3:a:php:php:5.6.0:alpha4:*:*:*:*:*:*",
                "cpe:2.3:a:php:php:5.6.0:alpha5:*:*:*:*:*:*"
            ]
        }
    ]
}
References

Affected packages

Git / github.com/php/php-src

Affected ranges

Type
GIT
Repo
https://github.com/php/php-src
Events
Introduced
2c1949d4e7fb4248c2a6b95b45094951c3607c8d
Last affected
140e2adb5ab8a5ed0624366c0416f07b8aa17254
Database specific 
{
    "extracted_events": [
        {
            "introduced": "5.0.0"
        },
        {
            "last_affected": "5.0.0"
        },
        {
            "introduced": "5.0.0-rc1"
        },
        {
            "last_affected": "5.0.0-rc1"
        },
        {
            "introduced": "5.0.0-rc2"
        },
        {
            "last_affected": "5.0.0-rc2"
        },
        {
            "introduced": "5.0.0-rc3"
        },
        {
            "last_affected": "5.0.0-rc3"
        },
        {
            "introduced": "5.0.1"
        },
        {
            "last_affected": "5.0.1"
        },
        {
            "introduced": "5.0.2"
        },
        {
            "last_affected": "5.0.2"
        },
        {
            "introduced": "5.0.3"
        },
        {
            "last_affected": "5.0.3"
        },
        {
            "introduced": "5.0.4"
        },
        {
            "last_affected": "5.0.4"
        },
        {
            "introduced": "5.0.5"
        },
        {
            "last_affected": "5.0.5"
        },
        {
            "introduced": "5.1.0"
        },
        {
            "last_affected": "5.1.0"
        },
        {
            "introduced": "5.1.1"
        },
        {
            "last_affected": "5.1.1"
        },
        {
            "introduced": "5.1.2"
        },
        {
            "last_affected": "5.1.2"
        },
        {
            "introduced": "5.1.3"
        },
        {
            "last_affected": "5.1.3"
        },
        {
            "introduced": "5.1.4"
        },
        {
            "last_affected": "5.1.4"
        },
        {
            "introduced": "5.1.5"
        },
        {
            "last_affected": "5.1.5"
        },
        {
            "introduced": "5.1.6"
        },
        {
            "last_affected": "5.1.6"
        },
        {
            "introduced": "5.2.0"
        },
        {
            "last_affected": "5.2.0"
        },
        {
            "introduced": "5.2.1"
        },
        {
            "last_affected": "5.2.1"
        },
        {
            "introduced": "5.2.2"
        },
        {
            "last_affected": "5.2.2"
        },
        {
            "introduced": "5.2.3"
        },
        {
            "last_affected": "5.2.3"
        },
        {
            "introduced": "5.2.4"
        },
        {
            "last_affected": "5.2.4"
        },
        {
            "introduced": "5.2.5"
        },
        {
            "last_affected": "5.2.5"
        },
        {
            "introduced": "5.2.6"
        },
        {
            "last_affected": "5.2.6"
        },
        {
            "introduced": "5.2.7"
        },
        {
            "last_affected": "5.2.7"
        },
        {
            "introduced": "5.2.8"
        },
        {
            "last_affected": "5.2.8"
        },
        {
            "introduced": "5.2.9"
        },
        {
            "last_affected": "5.2.9"
        },
        {
            "introduced": "5.2.10"
        },
        {
            "last_affected": "5.2.10"
        },
        {
            "introduced": "5.2.11"
        },
        {
            "last_affected": "5.2.11"
        },
        {
            "introduced": "5.2.12"
        },
        {
            "last_affected": "5.2.12"
        },
        {
            "introduced": "5.2.13"
        },
        {
            "last_affected": "5.2.13"
        },
        {
            "introduced": "5.2.14"
        },
        {
            "last_affected": "5.2.14"
        },
        {
            "introduced": "5.2.15"
        },
        {
            "last_affected": "5.2.15"
        },
        {
            "introduced": "5.2.16"
        },
        {
            "last_affected": "5.2.16"
        },
        {
            "introduced": "5.2.17"
        },
        {
            "last_affected": "5.2.17"
        },
        {
            "introduced": "5.3.0"
        },
        {
            "last_affected": "5.3.0"
        },
        {
            "introduced": "5.3.1"
        },
        {
            "last_affected": "5.3.1"
        },
        {
            "introduced": "5.3.2"
        },
        {
            "last_affected": "5.3.2"
        },
        {
            "introduced": "5.3.3"
        },
        {
            "last_affected": "5.3.3"
        },
        {
            "introduced": "5.3.4"
        },
        {
            "last_affected": "5.3.4"
        },
        {
            "introduced": "5.3.5"
        },
        {
            "last_affected": "5.3.5"
        },
        {
            "introduced": "5.3.6"
        },
        {
            "last_affected": "5.3.6"
        },
        {
            "introduced": "5.3.7"
        },
        {
            "last_affected": "5.3.7"
        },
        {
            "introduced": "5.3.8"
        },
        {
            "last_affected": "5.3.8"
        },
        {
            "introduced": "5.3.9"
        },
        {
            "last_affected": "5.3.9"
        },
        {
            "introduced": "5.3.10"
        },
        {
            "last_affected": "5.3.10"
        },
        {
            "introduced": "5.3.11"
        },
        {
            "last_affected": "5.3.11"
        },
        {
            "introduced": "5.3.12"
        },
        {
            "last_affected": "5.3.12"
        },
        {
            "introduced": "5.3.13"
        },
        {
            "last_affected": "5.3.13"
        },
        {
            "introduced": "5.3.14"
        },
        {
            "last_affected": "5.3.14"
        },
        {
            "introduced": "5.3.15"
        },
        {
            "last_affected": "5.3.15"
        },
        {
            "introduced": "5.3.16"
        },
        {
            "last_affected": "5.3.16"
        },
        {
            "introduced": "5.3.17"
        },
        {
            "last_affected": "5.3.17"
        },
        {
            "introduced": "5.3.18"
        },
        {
            "last_affected": "5.3.18"
        },
        {
            "introduced": "5.3.19"
        },
        {
            "last_affected": "5.3.19"
        },
        {
            "introduced": "5.3.20"
        },
        {
            "last_affected": "5.3.20"
        },
        {
            "introduced": "5.3.21"
        },
        {
            "last_affected": "5.3.21"
        },
        {
            "introduced": "5.3.22"
        },
        {
            "last_affected": "5.3.22"
        },
        {
            "introduced": "5.3.23"
        },
        {
            "last_affected": "5.3.23"
        },
        {
            "introduced": "5.3.24"
        },
        {
            "last_affected": "5.3.24"
        },
        {
            "introduced": "5.3.25"
        },
        {
            "last_affected": "5.3.25"
        },
        {
            "introduced": "5.3.26"
        },
        {
            "last_affected": "5.3.26"
        },
        {
            "introduced": "5.3.27"
        },
        {
            "last_affected": "5.3.27"
        },
        {
            "introduced": "5.3.28"
        },
        {
            "last_affected": "5.3.28"
        },
        {
            "introduced": "5.4.0"
        },
        {
            "last_affected": "5.4.0"
        },
        {
            "introduced": "5.4.1"
        },
        {
            "last_affected": "5.4.1"
        },
        {
            "introduced": "5.4.2"
        },
        {
            "last_affected": "5.4.2"
        },
        {
            "introduced": "5.4.3"
        },
        {
            "last_affected": "5.4.3"
        },
        {
            "introduced": "5.4.4"
        },
        {
            "last_affected": "5.4.4"
        },
        {
            "introduced": "5.4.5"
        },
        {
            "last_affected": "5.4.5"
        },
        {
            "introduced": "5.4.6"
        },
        {
            "last_affected": "5.4.6"
        },
        {
            "introduced": "5.4.7"
        },
        {
            "last_affected": "5.4.7"
        },
        {
            "introduced": "5.4.8"
        },
        {
            "last_affected": "5.4.8"
        },
        {
            "introduced": "5.4.9"
        },
        {
            "last_affected": "5.4.9"
        },
        {
            "introduced": "5.4.10"
        },
        {
            "last_affected": "5.4.10"
        },
        {
            "introduced": "5.4.11"
        },
        {
            "last_affected": "5.4.11"
        },
        {
            "introduced": "5.4.12"
        },
        {
            "last_affected": "5.4.12"
        },
        {
            "introduced": "5.4.12-rc1"
        },
        {
            "last_affected": "5.4.12-rc1"
        },
        {
            "introduced": "5.4.12-rc2"
        },
        {
            "last_affected": "5.4.12-rc2"
        },
        {
            "introduced": "5.4.13"
        },
        {
            "last_affected": "5.4.13"
        },
        {
            "introduced": "5.4.13-rc1"
        },
        {
            "last_affected": "5.4.13-rc1"
        },
        {
            "introduced": "5.4.14"
        },
        {
            "last_affected": "5.4.14"
        },
        {
            "introduced": "5.4.14-rc1"
        },
        {
            "last_affected": "5.4.14-rc1"
        },
        {
            "introduced": "5.4.15"
        },
        {
            "last_affected": "5.4.15"
        },
        {
            "introduced": "5.4.15-rc1"
        },
        {
            "last_affected": "5.4.15-rc1"
        },
        {
            "introduced": "5.4.16-rc1"
        },
        {
            "last_affected": "5.4.16-rc1"
        },
        {
            "introduced": "5.4.17"
        },
        {
            "last_affected": "5.4.17"
        },
        {
            "introduced": "5.4.18"
        },
        {
            "last_affected": "5.4.18"
        },
        {
            "introduced": "5.4.19"
        },
        {
            "last_affected": "5.4.19"
        },
        {
            "introduced": "5.4.20"
        },
        {
            "last_affected": "5.4.20"
        },
        {
            "introduced": "5.4.21"
        },
        {
            "last_affected": "5.4.21"
        },
        {
            "introduced": "5.4.22"
        },
        {
            "last_affected": "5.4.22"
        },
        {
            "introduced": "5.4.23"
        },
        {
            "last_affected": "5.4.23"
        },
        {
            "introduced": "5.4.24"
        },
        {
            "last_affected": "5.4.24"
        },
        {
            "introduced": "5.4.25"
        },
        {
            "last_affected": "5.4.25"
        },
        {
            "introduced": "5.4.26"
        },
        {
            "last_affected": "5.4.26"
        },
        {
            "introduced": "5.4.27"
        },
        {
            "last_affected": "5.4.27"
        },
        {
            "introduced": "5.4.28"
        },
        {
            "last_affected": "5.4.28"
        },
        {
            "introduced": "5.4.29"
        },
        {
            "last_affected": "5.4.29"
        },
        {
            "introduced": "5.4.30"
        },
        {
            "last_affected": "5.4.30"
        },
        {
            "introduced": "5.4.34"
        },
        {
            "last_affected": "5.4.34"
        },
        {
            "introduced": "5.4.35"
        },
        {
            "last_affected": "5.4.35"
        },
        {
            "introduced": "5.4.37"
        },
        {
            "last_affected": "5.4.37"
        },
        {
            "introduced": "5.4.38"
        },
        {
            "last_affected": "5.4.38"
        },
        {
            "introduced": "5.4.39"
        },
        {
            "last_affected": "5.4.39"
        },
        {
            "introduced": "5.4.41"
        },
        {
            "last_affected": "5.4.41"
        },
        {
            "introduced": "5.4.42"
        },
        {
            "last_affected": "5.4.42"
        },
        {
            "introduced": "5.4.43"
        },
        {
            "last_affected": "5.4.43"
        },
        {
            "introduced": "5.4.44"
        },
        {
            "last_affected": "5.4.44"
        },
        {
            "introduced": "5.4.45"
        },
        {
            "last_affected": "5.4.45"
        },
        {
            "introduced": "5.5.0"
        },
        {
            "last_affected": "5.5.0"
        },
        {
            "introduced": "5.5.0-alpha1"
        },
        {
            "last_affected": "5.5.0-alpha1"
        },
        {
            "introduced": "5.5.0-alpha2"
        },
        {
            "last_affected": "5.5.0-alpha2"
        },
        {
            "introduced": "5.5.0-alpha3"
        },
        {
            "last_affected": "5.5.0-alpha3"
        },
        {
            "introduced": "5.5.0-alpha4"
        },
        {
            "last_affected": "5.5.0-alpha4"
        },
        {
            "introduced": "5.5.0-alpha5"
        },
        {
            "last_affected": "5.5.0-alpha5"
        },
        {
            "introduced": "5.5.0-alpha6"
        },
        {
            "last_affected": "5.5.0-alpha6"
        },
        {
            "introduced": "5.5.0-beta1"
        },
        {
            "last_affected": "5.5.0-beta1"
        },
        {
            "introduced": "5.5.0-beta2"
        },
        {
            "last_affected": "5.5.0-beta2"
        },
        {
            "introduced": "5.5.0-beta3"
        },
        {
            "last_affected": "5.5.0-beta3"
        },
        {
            "introduced": "5.5.0-beta4"
        },
        {
            "last_affected": "5.5.0-beta4"
        },
        {
            "introduced": "5.5.0-rc1"
        },
        {
            "last_affected": "5.5.0-rc1"
        },
        {
            "introduced": "5.5.0-rc2"
        },
        {
            "last_affected": "5.5.0-rc2"
        },
        {
            "introduced": "5.5.1"
        },
        {
            "last_affected": "5.5.1"
        },
        {
            "introduced": "5.5.2"
        },
        {
            "last_affected": "5.5.2"
        },
        {
            "introduced": "5.5.3"
        },
        {
            "last_affected": "5.5.3"
        },
        {
            "introduced": "5.5.4"
        },
        {
            "last_affected": "5.5.4"
        },
        {
            "introduced": "5.5.5"
        },
        {
            "last_affected": "5.5.5"
        },
        {
            "introduced": "5.5.6"
        },
        {
            "last_affected": "5.5.6"
        },
        {
            "introduced": "5.5.7"
        },
        {
            "last_affected": "5.5.7"
        },
        {
            "introduced": "5.5.8"
        },
        {
            "last_affected": "5.5.8"
        },
        {
            "introduced": "5.5.9"
        },
        {
            "last_affected": "5.5.9"
        },
        {
            "introduced": "5.5.10"
        },
        {
            "last_affected": "5.5.10"
        },
        {
            "introduced": "5.5.11"
        },
        {
            "last_affected": "5.5.11"
        },
        {
            "introduced": "5.5.12"
        },
        {
            "last_affected": "5.5.12"
        },
        {
            "introduced": "5.5.13"
        },
        {
            "last_affected": "5.5.13"
        },
        {
            "introduced": "5.5.14"
        },
        {
            "last_affected": "5.5.14"
        },
        {
            "introduced": "5.5.18"
        },
        {
            "last_affected": "5.5.18"
        },
        {
            "introduced": "5.5.19"
        },
        {
            "last_affected": "5.5.19"
        },
        {
            "introduced": "5.5.20"
        },
        {
            "last_affected": "5.5.20"
        },
        {
            "introduced": "5.5.21"
        },
        {
            "last_affected": "5.5.21"
        },
        {
            "introduced": "5.5.22"
        },
        {
            "last_affected": "5.5.22"
        },
        {
            "introduced": "5.5.23"
        },
        {
            "last_affected": "5.5.23"
        },
        {
            "introduced": "5.5.24"
        },
        {
            "last_affected": "5.5.24"
        },
        {
            "introduced": "5.5.25"
        },
        {
            "last_affected": "5.5.25"
        },
        {
            "introduced": "5.5.26"
        },
        {
            "last_affected": "5.5.26"
        },
        {
            "introduced": "5.5.27"
        },
        {
            "last_affected": "5.5.27"
        },
        {
            "introduced": "5.5.28"
        },
        {
            "last_affected": "5.5.28"
        },
        {
            "introduced": "5.5.29"
        },
        {
            "last_affected": "5.5.29"
        },
        {
            "introduced": "5.5.30"
        },
        {
            "last_affected": "5.5.30"
        },
        {
            "introduced": "5.5.31"
        },
        {
            "last_affected": "5.5.31"
        },
        {
            "introduced": "5.5.32"
        },
        {
            "last_affected": "5.5.32"
        },
        {
            "introduced": "5.5.33"
        },
        {
            "last_affected": "5.5.33"
        },
        {
            "introduced": "5.5.34"
        },
        {
            "last_affected": "5.5.34"
        },
        {
            "introduced": "5.5.35"
        },
        {
            "last_affected": "5.5.35"
        },
        {
            "introduced": "5.5.36"
        },
        {
            "last_affected": "5.5.36"
        },
        {
            "introduced": "5.5.37"
        },
        {
            "last_affected": "5.5.37"
        },
        {
            "introduced": "5.6.0-alpha1"
        },
        {
            "last_affected": "5.6.0-alpha1"
        },
        {
            "introduced": "5.6.0-alpha2"
        },
        {
            "last_affected": "5.6.0-alpha2"
        },
        {
            "introduced": "5.6.0-alpha3"
        },
        {
            "last_affected": "5.6.0-alpha3"
        },
        {
            "introduced": "5.6.0-beta1"
        },
        {
            "last_affected": "5.6.0-beta1"
        },
        {
            "introduced": "5.6.0-beta2"
        },
        {
            "last_affected": "5.6.0-beta2"
        },
        {
            "introduced": "5.6.0-beta3"
        },
        {
            "last_affected": "5.6.0-beta3"
        },
        {
            "introduced": "5.6.0-beta4"
        },
        {
            "last_affected": "5.6.0-beta4"
        },
        {
            "introduced": "5.6.1"
        },
        {
            "last_affected": "5.6.1"
        },
        {
            "introduced": "5.6.2"
        },
        {
            "last_affected": "5.6.2"
        },
        {
            "introduced": "5.6.10"
        },
        {
            "last_affected": "5.6.10"
        },
        {
            "introduced": "5.6.11"
        },
        {
            "last_affected": "5.6.11"
        },
        {
            "introduced": "5.6.12"
        },
        {
            "last_affected": "5.6.12"
        },
        {
            "introduced": "5.6.13"
        },
        {
            "last_affected": "5.6.13"
        },
        {
            "introduced": "5.6.14"
        },
        {
            "last_affected": "5.6.14"
        },
        {
            "introduced": "5.6.15"
        },
        {
            "last_affected": "5.6.15"
        },
        {
            "introduced": "5.6.16"
        },
        {
            "last_affected": "5.6.16"
        },
        {
            "introduced": "5.6.17"
        },
        {
            "last_affected": "5.6.17"
        },
        {
            "introduced": "5.6.18"
        },
        {
            "last_affected": "5.6.18"
        },
        {
            "introduced": "5.6.19"
        },
        {
            "last_affected": "5.6.19"
        },
        {
            "introduced": "5.6.20"
        },
        {
            "last_affected": "5.6.20"
        },
        {
            "introduced": "5.6.21"
        },
        {
            "last_affected": "5.6.21"
        },
        {
            "introduced": "5.6.22"
        },
        {
            "last_affected": "5.6.22"
        },
        {
            "introduced": "5.6.23"
        },
        {
            "last_affected": "5.6.23"
        },
        {
            "introduced": "5.6.24"
        },
        {
            "last_affected": "5.6.24"
        },
        {
            "introduced": "5.6.25"
        },
        {
            "last_affected": "5.6.25"
        },
        {
            "introduced": "5.6.26"
        },
        {
            "last_affected": "5.6.26"
        },
        {
            "introduced": "5.6.27"
        },
        {
            "last_affected": "5.6.27"
        },
        {
            "introduced": "7.0.0"
        },
        {
            "last_affected": "7.0.0"
        },
        {
            "introduced": "7.0.1"
        },
        {
            "last_affected": "7.0.1"
        },
        {
            "introduced": "7.0.2"
        },
        {
            "last_affected": "7.0.2"
        },
        {
            "introduced": "7.0.3"
        },
        {
            "last_affected": "7.0.3"
        },
        {
            "introduced": "7.0.4"
        },
        {
            "last_affected": "7.0.4"
        },
        {
            "introduced": "7.0.5"
        },
        {
            "last_affected": "7.0.5"
        },
        {
            "introduced": "7.0.6"
        },
        {
            "last_affected": "7.0.6"
        },
        {
            "introduced": "7.0.7"
        },
        {
            "last_affected": "7.0.7"
        },
        {
            "introduced": "7.0.8"
        },
        {
            "last_affected": "7.0.8"
        },
        {
            "introduced": "7.0.9"
        },
        {
            "last_affected": "7.0.9"
        },
        {
            "introduced": "7.0.10"
        },
        {
            "last_affected": "7.0.10"
        },
        {
            "introduced": "7.0.11"
        },
        {
            "last_affected": "7.0.11"
        },
        {
            "introduced": "7.0.12"
        },
        {
            "last_affected": "7.0.12"
        }
    ],
    "source": "CPE_STRING",
    "cpe": [
        "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.2.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.2.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.2.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.2.6:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.2.7:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.2.8:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.2.9:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.2.10:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.2.11:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.2.12:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.2.13:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.2.14:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.2.15:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.2.16:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.2.17:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.6:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.7:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.8:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.9:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.10:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.11:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.12:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.13:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.14:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.15:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.16:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.17:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.18:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.19:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.20:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.21:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.22:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.23:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.24:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.25:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.26:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.27:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.3.28:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.6:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.7:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.8:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.9:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.10:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.11:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.12:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.12:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.12:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.13:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.13:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.14:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.14:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.15:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.15:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.16:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.17:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.18:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.19:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.20:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.21:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.22:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.23:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.24:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.25:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.26:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.27:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.28:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.29:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.30:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.34:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.35:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.37:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.38:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.39:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.41:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.42:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.43:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.44:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.4.45:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.0:alpha1:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.0:alpha2:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.0:alpha3:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.0:alpha4:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.0:alpha5:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.0:alpha6:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.0:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.0:beta2:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.0:beta3:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.0:beta4:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.0:rc1:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.0:rc2:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.6:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.7:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.8:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.9:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.10:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.11:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.12:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.13:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.14:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.18:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.19:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.20:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.21:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.22:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.23:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.24:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.25:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.26:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.27:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.28:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.29:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.30:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.31:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.32:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.33:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.34:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.35:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.36:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.5.37:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.6.0:alpha1:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.6.0:alpha2:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.6.0:alpha3:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.6.0:beta1:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.6.0:beta2:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.6.0:beta3:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.6.0:beta4:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.6.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.6.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.6.10:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.6.11:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.6.12:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.6.13:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.6.14:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.6.15:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.6.16:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.6.17:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.6.18:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.6.19:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.6.20:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.6.21:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.6.22:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.6.23:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.6.24:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.6.25:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.6.26:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:5.6.27:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:7.0.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:7.0.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:7.0.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:7.0.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:7.0.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:7.0.5:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:7.0.6:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:7.0.7:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:7.0.8:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:7.0.9:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:7.0.10:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:7.0.11:*:*:*:*:*:*:*",
        "cpe:2.3:a:php:php:7.0.12:*:*:*:*:*:*:*"
    ]
}

Affected versions

5.*
5.0.0
5.0.0-rc1
5.0.0-rc2
5.0.0-rc3
5.0.1
5.0.2
5.0.3
5.0.4
5.0.5
5.1.0
5.1.1
5.1.2
5.1.3
5.1.4
5.1.5
5.1.6
5.2.0
5.2.1
5.2.10
5.2.11
5.2.12
5.2.13
5.2.14
5.2.15
5.2.16
5.2.17
5.2.2
5.2.3
5.2.4
5.2.5
5.2.6
5.2.7
5.2.8
5.2.9
5.3.0
5.3.1
5.3.10
5.3.11
5.3.12
5.3.13
5.3.14
5.3.15
5.3.16
5.3.17
5.3.18
5.3.19
5.3.2
5.3.20
5.3.21
5.3.22
5.3.23
5.3.24
5.3.25
5.3.26
5.3.27
5.3.28
5.3.3
5.3.4
5.3.5
5.3.6
5.3.7
5.3.8
5.3.9
5.4.0
5.4.1
5.4.10
5.4.11
5.4.12
5.4.12-rc1
5.4.12-rc2
5.4.13
5.4.13-rc1
5.4.14
5.4.14-rc1
5.4.15
5.4.15-rc1
5.4.16-rc1
5.4.17
5.4.18
5.4.19
5.4.2
5.4.20
5.4.21
5.4.22
5.4.23
5.4.24
5.4.25
5.4.26
5.4.27
5.4.28
5.4.29
5.4.3
5.4.30
5.4.34
5.4.35
5.4.37
5.4.38
5.4.39
5.4.4
5.4.41
5.4.42
5.4.43
5.4.44
5.4.45
5.4.5
5.4.6
5.4.7
5.4.8
5.4.9
5.5.0
5.5.0-alpha1
5.5.0-alpha2
5.5.0-alpha3
5.5.0-alpha4
5.5.0-alpha5
5.5.0-alpha6
5.5.0-beta1
5.5.0-beta2
5.5.0-beta3
5.5.0-beta4
5.5.0-rc1
5.5.0-rc2
5.5.1
5.5.10
5.5.11
5.5.12
5.5.13
5.5.14
5.5.18
5.5.19
5.5.2
5.5.20
5.5.21
5.5.22
5.5.23
5.5.24
5.5.25
5.5.26
5.5.27
5.5.28
5.5.29
5.5.3
5.5.30
5.5.31
5.5.32
5.5.33
5.5.34
5.5.35
5.5.36
5.5.37
5.5.4
5.5.5
5.5.6
5.5.7
5.5.8
5.5.9
5.6.0-alpha1
5.6.0-alpha2
5.6.0-alpha3
5.6.0-beta1
5.6.0-beta2
5.6.0-beta3
5.6.0-beta4
5.6.1
5.6.10
5.6.11
5.6.12
5.6.13
5.6.14
5.6.15
5.6.16
5.6.17
5.6.18
5.6.19
5.6.2
5.6.20
5.6.21
5.6.22
5.6.23
5.6.24
5.6.25
5.6.26
5.6.27
7.*
7.0.0
7.0.1
7.0.10
7.0.11
7.0.12
7.0.2
7.0.3
7.0.4
7.0.5
7.0.6
7.0.7
7.0.8
7.0.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-7478.json"