← back
CVE-2016-3078

CVE-2016-3078

EPSS 57.6%
Multiple integer overflows in php_zip.c in the zip extension in PHP before 7.0.6 allow remote attackers to cause a denial of service (heap-based buffer overflow and application crash) or possibly have unspecified other impact via a crafted call to (1) getFromIndex or (2) getFromName in the ZipArchive class.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/39742/unverifiedexploitdbwww.exploit-db.com/exploits/39742unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://bugs.php.net/bug.php?id=71923https://github.com/php/php-src/commit/3b8d4de300854b3517c7acb239b84f7726c1353c?w=1https://php.net/ChangeLog-7.phphttps://security-tracker.debian.org/tracker/CVE-2016-3078https://www.exploit-db.com/exploits/39742/http://www.openwall.com/lists/oss-security/2016/04/28/1http://www.securitytracker.com/id/1035701