PHP tar/zip/phar parser denial of service vulnerability

PHP is an open source general-purpose computer scripting language. A security vulnerability in PHP's tar/zip/phar parser allows remote attackers to use the vulnerability to construct malicious compressed files that can be tricked into being parsed by the user, crashing the application...

Internet Bug Bounty: Heap corruption in tar/zip/phar parser

https://bugs.php.net/bug.php?id=71354&edit=2...