PHP Use After Free Vulnerability - CVE-2016-5773 - Vulnerability Database

PHP Use After Free Vulnerability - CVE-2016-5773

Critical

Reference: CVE-2016-5773

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2016-5773

Title: PHP Use After Free Vulnerability

Overview:

php_zip.c in the zip extension in PHP before 5.5.37 5.6.x before 5.6.23 and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data containing a ZipArchive object.