CVE-2016-4473

CRITICAL

PHP 5.6.x and 7.0.7 - Remote Code Execution via Use-After-Free in phar_object.c

Title source: llm

Description

/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code. NOTE: Introduced as part of an incomplete fix to CVE-2015-6833.

References (4)

Core 4

Core References

Third Party Advisory vendor-advisory x_refsource_suse

http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00007.html

Third Party Advisory, VDB Entry vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2016-2750.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/98999

Exploit, Issue Tracking, Patch, Third Party Advisory, VDB Entry x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=1347772

Scores

CVSS v3 9.8

EPSS 0.1682

EPSS Percentile 95.0%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-416

Status published

Products (26)

php/php 5.6.0 alpha1 (9 CPE variants)

php/php 5.6.1

php/php 5.6.2

php/php 5.6.3

php/php 5.6.4

php/php 5.6.5

php/php 5.6.6

php/php 5.6.7

php/php 5.6.8

php/php 5.6.9

... and 16 more

Published Jun 08, 2017

Tracked Since Feb 18, 2026