CVE-2012-2386

Integer overflow in the phar_parse_tarfile function in tar.c in the phar extension in PHP before 5.3.14 and 5.4.x before 5.4.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted tar file that triggers a heap-based buffer overflow.

References

Link	Resource
http://0x1byte.blogspot.com/2011/04/php-phar-extension-heap-overflow.html	Exploit Third Party Advisory
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=158d8a6b088662ce9d31e0c777c6ebe90efdc854
http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00003.html	Mailing List Third Party Advisory
http://openwall.com/lists/oss-security/2012/05/22/10	Mailing List Third Party Advisory
http://support.apple.com/kb/HT5501	Third Party Advisory
http://www.php.net/ChangeLog-5.php	Vendor Advisory
https://bugs.php.net/bug.php?id=61065	Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=823594	Issue Tracking Third Party Advisory
http://0x1byte.blogspot.com/2011/04/php-phar-extension-heap-overflow.html	Exploit Third Party Advisory
http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=158d8a6b088662ce9d31e0c777c6ebe90efdc854
http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00003.html	Mailing List Third Party Advisory
http://openwall.com/lists/oss-security/2012/05/22/10	Mailing List Third Party Advisory
http://support.apple.com/kb/HT5501	Third Party Advisory
http://www.php.net/ChangeLog-5.php	Vendor Advisory
https://bugs.php.net/bug.php?id=61065	Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=823594	Issue Tracking Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:php:php::::::::
	cpe:2.3:a:php:php::::::::

History

21 Nov 2024, 01:38

Type	Values Removed	Values Added
References	~~() http://0x1byte.blogspot.com/2011/04/php-phar-extension-heap-overflow.html - Exploit, Third Party Advisory~~	() http://0x1byte.blogspot.com/2011/04/php-phar-extension-heap-overflow.html - Exploit, Third Party Advisory
References	~~() http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=158d8a6b088662ce9d31e0c777c6ebe90efdc854 -~~	() http://git.php.net/?p=php-src.git%3Ba=commit%3Bh=158d8a6b088662ce9d31e0c777c6ebe90efdc854 -
References	~~() http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html - Mailing List, Third Party Advisory~~	() http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html - Mailing List, Third Party Advisory
References	~~() http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00003.html - Mailing List, Third Party Advisory~~	() http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00003.html - Mailing List, Third Party Advisory
References	~~() http://openwall.com/lists/oss-security/2012/05/22/10 - Mailing List, Third Party Advisory~~	() http://openwall.com/lists/oss-security/2012/05/22/10 - Mailing List, Third Party Advisory
References	~~() http://support.apple.com/kb/HT5501 - Third Party Advisory~~	() http://support.apple.com/kb/HT5501 - Third Party Advisory
References	~~() http://www.php.net/ChangeLog-5.php - Vendor Advisory~~	() http://www.php.net/ChangeLog-5.php - Vendor Advisory
References	~~() https://bugs.php.net/bug.php?id=61065 - Vendor Advisory~~	() https://bugs.php.net/bug.php?id=61065 - Vendor Advisory
References	~~() https://bugzilla.redhat.com/show_bug.cgi?id=823594 - Issue Tracking, Third Party Advisory~~	() https://bugzilla.redhat.com/show_bug.cgi?id=823594 - Issue Tracking, Third Party Advisory

05 Aug 2022, 16:54

Type	Values Removed	Values Added
References	~~(CONFIRM) https://bugzilla.redhat.com/show_bug.cgi?id=823594 -~~	(CONFIRM) https://bugzilla.redhat.com/show_bug.cgi?id=823594 - Issue Tracking, Third Party Advisory
References	~~(CONFIRM) http://git.php.net/?p=php-src.git;a=commit;h=158d8a6b088662ce9d31e0c777c6ebe90efdc854 -~~	(CONFIRM) http://git.php.net/?p=php-src.git;a=commit;h=158d8a6b088662ce9d31e0c777c6ebe90efdc854 - Patch, Vendor Advisory
References	~~(SUSE) http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00003.html -~~	(SUSE) http://lists.opensuse.org/opensuse-security-announce/2012-07/msg00003.html - Mailing List, Third Party Advisory
References	~~(MISC) http://0x1byte.blogspot.com/2011/04/php-phar-extension-heap-overflow.html - Exploit~~	(MISC) http://0x1byte.blogspot.com/2011/04/php-phar-extension-heap-overflow.html - Exploit, Third Party Advisory
References	~~(APPLE) http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html -~~	(APPLE) http://lists.apple.com/archives/security-announce/2012/Sep/msg00004.html - Mailing List, Third Party Advisory
References	~~(CONFIRM) http://support.apple.com/kb/HT5501 -~~	(CONFIRM) http://support.apple.com/kb/HT5501 - Third Party Advisory
References	~~(CONFIRM) https://bugs.php.net/bug.php?id=61065 -~~	(CONFIRM) https://bugs.php.net/bug.php?id=61065 - Vendor Advisory
References	~~(MLIST) http://openwall.com/lists/oss-security/2012/05/22/10 -~~	(MLIST) http://openwall.com/lists/oss-security/2012/05/22/10 - Mailing List, Third Party Advisory
References	~~(CONFIRM) http://www.php.net/ChangeLog-5.php -~~	(CONFIRM) http://www.php.net/ChangeLog-5.php - Vendor Advisory
CPE	cpe:2.3:a:php:php:4.0.7:::::::* cpe:2.3:a:php:php:4.3.3:::::::* cpe:2.3:a:php:php:5.0.3:::::::* cpe:2.3:a:php:php:5.2.7:::::::* cpe:2.3:a:php:php:5.0.5:::::::* cpe:2.3:a:php:php:4.4.7:::::::* cpe:2.3:a:php:php:5.2.1:::::::* cpe:2.3:a:php:php:3.0:::::::* cpe:2.3:a:php:php:4.0.3:::::::* cpe:2.3:a:php:php:3.0.16:::::::* cpe:2.3:a:php:php:5.0.0:rc1:::::: cpe:2.3:a:php:php:3.0.5:::::::* cpe:2.3:a:php:php:4.0.0:::::::* cpe:2.3:a:php:php:5.0.0:beta3:::::: cpe:2.3:a:php:php:4.3.9:::::::* cpe:2.3:a:php:php:4.1.0:::::::* cpe:2.3:a:php:php:5.1.6:::::::* cpe:2.3:a:php:php:5.4.1:::::::* cpe:2.3:a:php:php:4.3.11:::::::* cpe:2.3:a:php:php:3.0.1:::::::* cpe:2.3:a:php:php:5.2.10:::::::* cpe:2.3:a:php:php:3.0.3:::::::* cpe:2.3:a:php:php:5.3.5:::::::* cpe:2.3:a:php:php:5.2.4:::::::* cpe:2.3:a:php:php:2.0:::::::* cpe:2.3:a:php:php:5.4.0:::::::* cpe:2.3:a:php:php:4.2.1:::::::* cpe:2.3:a:php:php:5.3.2:::::::* cpe:2.3:a:php:php:5.2.0:::::::* cpe:2.3:a:php:php:5.3.8:::::::* cpe:2.3:a:php:php:3.0.8:::::::* cpe:2.3:a:php:php:5.3.0:::::::* cpe:2.3:a:php:php:4.3.4:::::::* cpe:2.3:a:php:php:5.0.0:rc2:::::: cpe:2.3:a:php:php:4.4.1:::::::* cpe:2.3:a:php:php:4.0:beta4:::::: cpe:2.3:a:php:php:4.1.2:::::::* cpe:2.3:a:php:php:5.3.10:::::::* cpe:2.3:a:php:php:3.0.12:::::::* cpe:2.3:a:php:php:4.3.2:::::::* cpe:2.3:a:php:php:4.1.1:::::::* cpe:2.3:a:php:php:5.0.0:beta2:::::: cpe:2.3:a:php:php:4.3.7:::::::* cpe:2.3:a:php:php:4.0.2:::::::* cpe:2.3:a:php:php:5.0.4:::::::* cpe:2.3:a:php:php:5.2.9:::::::* cpe:2.3:a:php:php:4.4.0:::::::* cpe:2.3:a:php:php:2.0b10:::::::* cpe:2.3:a:php:php:4.3.8:::::::* cpe:2.3:a:php:php:5.0.0:rc3:::::: cpe:2.3:a:php:php:3.0.7:::::::* cpe:2.3:a:php:php:4.0:beta_4_patch1:::::: cpe:2.3:a:php:php:5.1.2:::::::* cpe:2.3:a:php:php:3.0.17:::::::* cpe:2.3:a:php:php:5.1.1:::::::* cpe:2.3:a:php:php:4.4.5:::::::* cpe:2.3:a:php:php:5.2.3:::::::* cpe:2.3:a:php:php:4.2.0:::::::* cpe:2.3:a:php:php:4.0.5:::::::* cpe:2.3:a:php:php:4.3.0:::::::* cpe:2.3:a:php:php:5.4.2:::::::* cpe:2.3:a:php:php:4.0.6:::::::* cpe:2.3:a:php:php:4.4.4:::::::* cpe:2.3:a:php:php:5.3.7:::::::* cpe:2.3:a:php:php:3.0.9:::::::* cpe:2.3:a:php:php:4.3.10:::::::* cpe:2.3:a:php:php:3.0.13:::::::* cpe:2.3:a:php:php:3.0.14:::::::* cpe:2.3:a:php:php:5.1.4:::::::* cpe:2.3:a:php:php:4.3.6:::::::* cpe:2.3:a:php:php:5.3.4:::::::* cpe:2.3:a:php:php:4.4.2:::::::* cpe:2.3:a:php:php:5.2.2:::::::* cpe:2.3:a:php:php:5.2.16:::::::* cpe:2.3:a:php:php:5.2.5:::::::* cpe:2.3:a:php:php:5.1.3:::::::* cpe:2.3:a:php:php:5.2.13:::::::* cpe:2.3:a:php:php:4.4.9:::::::* cpe:2.3:a:php:php:3.0.11:::::::* cpe:2.3:a:php:php:5.1.0:::::::* cpe:2.3:a:php:php:5.1.5:::::::* cpe:2.3:a:php:php:4.3.5:::::::* cpe:2.3:a:php:php:4.3.1:::::::* cpe:2.3:a:php:php:5.0.0:beta4:::::: cpe:2.3:a:php:php:4.4.8:::::::* cpe:2.3:a:php:php:5.3.1:::::::* cpe:2.3:a:php:php:5.2.14:::::::* cpe:2.3:a:php:php:5.2.8:::::::* cpe:2.3:a:php:php:4.2.3:::::::* cpe:2.3:a:php:php:3.0.10:::::::* cpe:2.3:a:php:php:4.0:beta1:::::: cpe:2.3:a:php:php:4.2.2:::::::* cpe:2.3:a:php:php:5.0.2:::::::* cpe:2.3:a:php:php:4.4.6:::::::* cpe:2.3:a:php:php:5.2.12:::::::* cpe:2.3:a:php:php:5.3.9:::::::* cpe:2.3:a:php:php:5.2.11:::::::* cpe:2.3:a:php:php:3.0.2:::::::* cpe:2.3:a:php:php:5.4.0:beta2:::::: cpe:2.3:a:php:php:5.3.3:::::::* cpe:2.3:a:php:php:5.2.15:::::::* cpe:2.3:a:php:php:5.3.11:::::::* cpe:2.3:a:php:php:3.0.6:::::::* cpe:2.3:a:php:php:4.0:beta2:::::: cpe:2.3:a:php:php:4.4.3:::::::* cpe:2.3:a:php:php:4.0.1:::::::* cpe:2.3:a:php:php:1.0:::::::* cpe:2.3:a:php:php:5.2.17:::::::* cpe:2.3:a:php:php:3.0.18:::::::* cpe:2.3:a:php:php:5.0.0:beta1:::::: cpe:2.3:a:php:php:5.0.0:::::::* cpe:2.3:a:php:php:5.2.6:::::::* cpe:2.3:a:php:php:3.0.15:::::::* cpe:2.3:a:php:php:5.3.6:::::::* cpe:2.3:a:php:php:4.0:beta3:::::: cpe:2.3:a:php:php:4.0.4:::::::* cpe:2.3:a:php:php:5.0.1:::::::* cpe:2.3:a:php:php:3.0.4:::::::*

7.5^/10

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

CVE-2012-2386

7.5 /10