EUVD-2016-10723

Malware in sbrugna...

Design/Logic Flaw

phpzip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service use-after-free and application crash...

CVE-2016-5773

CVE-2016-5773 affects php_zip.c in the PHP zip extension; PHP versions before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 interact with unserialize and garbage collection, enabling remote attackers to execute arbitrary code or cause a denial of service via crafted serialized data containing...

CVE-2016-6295

ext/snmp/snmp.c in PHP before 5.5.38, 5.6.x before 5.6.24, and 7.x before 7.0.9 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to cause a denial of service use-after-free and application crash or possibly have unspecified other impac...