CVE-2015-3307 in PHPinfo

Summary

The phar_parse_metadata function in ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (heap metadata corruption) or possibly have unspecified other impact via a crafted tar archive.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservation

04/15/2015

Disclosure

06/09/2015

Entries

1

CPE

ready

CVSS

5.3

EPSS

0.18407

CTI

0.00

Sources

Want to know what is going to be exploited?

We predict KEV entries!