Description

The Phar extension in PHP before 5.5.34, 5.6.x before 5.6.20, and 7.x before 7.0.5 allows remote attackers to execute arbitrary code via a crafted filename, as demonstrated by mishandling of \0 characters by the phar_analyze_path function in ext/phar/phar.c.

Remediation

References

CVE-2016-4072

Related Vulnerabilities

WordPress Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2003-1599)

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-7939)

PHP Resource Management Errors Vulnerability (CVE-2010-3710)

Claroline Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3716)

WordPress Plugin Easy Google Analytics for WordPress Cross-Site Request Forgery (1.6.0)

Severity

Critical

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-20 CVE-2016-4072