Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2016-5773
7.5
HIGHCVSS v2
Published
August 7, 2016
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
php_zip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and application crash) via crafted serialized data containing a ZipArchive object.
GitHub
php
NPMAllows you to run PHP code in Node.js in various ways.
NPMAllows you to run PHP code in Node.js in various ways.= 5.6.1, = 5.6.0, = 5.6.5, = 7.0.4, = 5.6.12, = 5.6.13, = 5.6.4, = 7.0.2, = 7.0.3, = 5.6.20, = 5.6.21, = 7.0.1, = 5.6.11, = 5.6.2, = 5.6.6, = 5.6.7, = 5.6.10, = 7.0.7, = 5.6.17, = 5.6.18, = 5.6.15, = 5.6.14, = 5.6.8, = 5.6.9, = 7.0.0, = 5.6.19, = 7.0.6, = 7.0.5, = 5.6.16, = 5.6.22, = 5.6.23, = 5.6.3, <= 5.5.36NVD
