5 matches found
SUSE CVE-2015-3329
Multiple stack-based buffer overflows in the pharsetinode function in pharinternal.h in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allow remote attackers to execute arbitrary code via a crafted length value in a 1 tar, 2 phar, or 3 ZIP archive...
PHP phar_set Code Execution
The vulnerability of the pharset inode function in the PHP language interpreter arises due to buffer overflow. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
php: buffer overflow in phar_set_inode()
A buffer overflow flaw was found in the way PHP's Phar extension parsed Phar archives. A specially crafted archive could cause PHP to crash or, possibly, execute arbitrary code when opened...
UBUNTU-CVE-2015-3329
Multiple stack-based buffer overflows in the pharsetinode function in pharinternal.h in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allow remote attackers to execute arbitrary code via a crafted length value in a 1 tar, 2 phar, or 3 ZIP archive...
PT-2015-3425
Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.40 PHP versions 5.5.x prior to 5.5.24 PHP versions 5.6.x prior to 5.6.8 Description The issue is caused by multiple stack-based buffer overflows in the phar set inode function, allowing remote attackers to execute...