CVE-2012-2386 in PHP
Zusammenfassung (Englisch)
Integer overflow in the phar_parse_tarfile function in tar.c in the phar extension in PHP before 5.3.14 and 5.4.x before 5.4.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted tar file that triggers a heap-based buffer overflow.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservieren
19.04.2012
Veröffentlichung
07.07.2012
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 61220 | PHP tar.c phar_parse_tarfile Remote Code Execution | 189 | Proof-of-Concept | Offizieller Fix | CVE-2012-2386 |