6 matches found
SUSE CVE-2015-4021
The pharparsetarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 does not verify that the first character of a filename is different from the \0 character, which allows remote attackers to cause a denial of service integer underflow and memory...
The vulnerability of the phar_parse_tarfile function in the PHP programming language allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the PHP interpreter extension is related to errors in number processing. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure using a specially created tar archive...
The vulnerability of the phar_parse_tarfile function in the PHP programming language allows a hacker to trigger a service failure.
The vulnerability of the pharparsetarfile function ext/phar/tar.c in the PHP programming language is related to errors in number processing. Exploiting this vulnerability can allow an attacker to cause service failures remotely...
php: memory corruption in phar_parse_tarfile caused by empty entry file name
An integer underflow flaw leading to out-of-bounds memory access was found in the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened...
php: memory corruption in phar_parse_tarfile caused by empty entry file name
An integer underflow flaw leading to out-of-bounds memory access was found in the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened...
PHP phar_parse_tarfile() function integer underflow vulnerability
PHP is a general-purpose web programming language. An integer underflow vulnerability exists in the PHP pharparsetarfile function, which allows remote attackers to construct a special Phar file that can be parsed by an application to trigger an overflow and execute arbitrary code...