PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability - CVE-2016-6297 - Vulnerability Database

PHP

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability - CVE-2016-6297

High

Reference: CVE-2016-6297

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2016-6297

Title: PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Overview:

Integer overflow in the php_stream_zip_opener function in ext/zip/zip_stream.c in PHP before 5.5.38 5.6.x before 5.6.24 and 7.x before 7.0.9 allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly have unspecified other impact via a crafted zip:// URL.