CVE-2018-1000888

CVE-2018-1000888 affects the PEAR Archive_Tar library (versions 1.4.3 and earlier). The vulnerability arises from unsafe file operations using $v_header['filename'] during extract, which can trigger phar:// based unserialization. This enables PHP object injection and can lead to destructor/wakeup...