CVE-2016-5773 in macOSinfo

Zusammenfassung

von MITRE

php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data containing a ZipArchive object.

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Reservieren

23.06.2016

Veröffentlichung

07.08.2016

Moderieren

akzeptiert

Eintrag

2

Verknüpfen

zeigen

CPE

bereit

Exploit

Download

EPSS

0.16127

KEV

nein

Aktivitäten

very low

Sektor

Finance, Agriculture, ...

Quellen

MITREhttps://www.cve.org/CVERecord?id=CVE-2016-5773
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2016-5773
CVE Detailshttps://www.cvedetails.com/cve/CVE-2016-5773/

◂ ZurückÜbersichtWeiter ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!