CVE-2016-3078 Multiple integer overflows in php_zip.c in the zip extension in PHP before 7.0.6 allow remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have...
CriticalCVSS 9.8
EPSS 56.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer overflows in php_zip.c in the zip extension in PHP before 7.0.6 allow remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted call to (1) getFromIndex or (2) getFromName in the ZipArchive class.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP | >= 7.0.0, < 7.0.6 | 7.0.6 |
References
- PHP 7.0.6 Released vendor-advisory
- [oss-security] 20160428 CVE-2016-3078: php: integer overflow in ZipArchive::getFrom* exploit mailing-list third-party-advisory
- 1035701 broken-link third-party-advisory vdb-entry
- bugs.php.net exploit issue-tracking vendor-advisory
- github.com patch third-party-advisory
- php.net release-notes vendor-advisory
- security-tracker.debian.org third-party-advisory
- 39742 exploit third-party-advisory vdb-entry