Description
Off-by-one error in the phar_parse_pharfile function in ext/phar/phar.c in PHP before 5.6.30 and 7.0.x before 7.0.15 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted PHAR archive with an alias mismatch.
Remediation
References
Related Vulnerabilities
MySQL Resource Management Errors Vulnerability (CVE-2010-3836)
Ruby Improper Authentication Vulnerability (CVE-2017-10784)
WordPress Plugin Quick Page/Post Redirect Cross-Site Request Forgery (5.0.4)
Oracle JRE CVE-2024-20952 Vulnerability (CVE-2024-20952)
WordPress Plugin Video Sidebar Widgets Cross-Site Scripting (6.1)