Description

The phar_parse_metadata function in ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (heap metadata corruption) or possibly have unspecified other impact via a crafted tar archive.

Remediation

References

CVE-2015-3307

Related Vulnerabilities

MediaWiki Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-1190)

WordPress Plugin Alpine PhotoTile for Instagram Cross-Site Scripting (1.2.7.4)

Ruby Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2026-46727)

Apache HTTP Server CVE-2005-2700 Vulnerability (CVE-2005-2700)

EspoCRM Cleartext Transmission of Sensitive Information Vulnerability (CVE-2022-38846)

Severity

High

Classification

CVE-2015-3307 CWE-119

Tags

Missing Update Known Vulnerabilities