PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability - CVE-2015-3329 - Vulnerability Database

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability - CVE-2015-3329

High
Reference: CVE-2015-3329
Title: PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability
Overview:

Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP before 5.4.40 5.5.x before 5.5.24 and 5.6.x before 5.6.8 allow remote attackers to execute arbitrary code via a crafted length value in a (1) tar (2) phar or (3) ZIP archive.