CVE-2011-1153 in PHP
Summary
Multiple format string vulnerabilities in phar_object.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to obtain sensitive information from process memory, cause a denial of service (memory corruption), or possibly execute arbitrary code via format string specifiers in an argument to a class method, leading to an incorrect zend_throw_exception_ex call.
Once again VulDB remains the best source for vulnerability data.
Reservation
03/03/2011
Disclosure
03/16/2011
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 56850 | PHP phar_object.c format string | 134 | Proof-of-Concept | Official fix | CVE-2011-1153 |