CVE-2016-3142

The phar_parse_zipfile function in zip.c in the PHAR extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to obtain sensitive…

published March 31, 2016

CVSS
—
EPSS
5%
Percentile
92.3
In the wild
Unconfirmed
What it is

The phar_parse_zipfile function in zip.c in the PHAR extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (out-of-bounds read and application crash) by placing a PK\x05\x06 signature at an invalid location.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05042 · 92.3th percentile
Published
2016-03-31T16:00Z
EPSS history
Timeline
  • 31 MAR 16:00Z
    The phar_parse_zipfile function in zip.c in the PHAR extension in PHP before 5.5.33 and 5.6.x before 5.6.19 allows remote attackers to obtain sensitive…
    cvelistv5