Published: 07/08/2016 Updated: 20/07/2022

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple integer overflows in php_zip.c in the zip extension in PHP prior to 7.0.6 allow remote malicious users to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted call to (1) getFromIndex or (2) getFromName in the ZipArchive class.

Vulnerable Product	Search on Vulmon	Subscribe to Product
php php

Several security issues were fixed in PHP ...

Multiple integer overflows in php_zipc in the zip extension in PHP before 706 allow remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted call to (1) getFromIndex or (2) getFromName in the ZipArchive class ...

Details ======= An integer wrap may occur in PHP 7x before version 706 when reading zip files with the getFromIndex() and getFromName() methods of ZipArchive, resulting in a heap overflow php-705/ext/zip/php_zipc ,---- | 2679 static void php_zip_get_from(INTERNAL_FUNCTION_PARAMETERS, int type) /* {{{ */ | 2680 { | | 2684 struct zip_st ...

An integer wrap may occur in PHP 7x before version 706 when reading zip files with the getFromIndex() and getFromName() methods of ZipArchive, resulting in a heap overflow Full exploit included ...

CWE-190 http://www.openwall.com/lists/oss-security/2016/04/28/1 https://bugs.php.net/bug.php?id=71923 https://security-tracker.debian.org/tracker/CVE-2016-3078 https://github.com/php/php-src/commit/3b8d4de300854b3517c7acb239b84f7726c1353c?w=1 https://php.net/ChangeLog-7.php http://www.securitytracker.com/id/1035701 https://www.exploit-db.com/exploits/39742/https://usn.ubuntu.com/2984-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/39742/

CVE-2016-3078

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect