CVE-2016-4473

Published: Jun 8, 2017Modified: May 13, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code. NOTE: Introduced as part of an incomplete fix to CVE-2015-6833.

Affected (34)

Products: Php: Php · Suse: Linux Enterprise Module For Web Scripting, Linux Enterprise Software Development Kit

Php

1 product

Php

Suse

2 products

Linux Enterprise Module For Web Scripting

Linux Enterprise Software Development Kit

Configuration A

32 vulnerable

Vulnerable Software	Affected Versions
Php Php	Version 5.6.0 alpha1
Php Php	Version 5.6.0 alpha2
Php Php	Version 5.6.0 alpha3
Php Php	Version 5.6.0 alpha4
Php Php	Version 5.6.0 alpha5
Php Php	Version 5.6.0 beta1
Php Php	Version 5.6.0 beta2
Php Php	Version 5.6.0 beta3
Php Php	Version 5.6.0 beta4
Php Php	Version 5.6.10
Php Php	Version 5.6.11
Php Php	Version 5.6.12
Php Php	Version 5.6.13
Php Php	Version 5.6.14
Php Php	Version 5.6.15
Php Php	Version 5.6.16
Php Php	Version 5.6.17
Php Php	Version 5.6.18
Php Php	Version 5.6.19
Php Php	Version 5.6.1
Php Php	Version 5.6.20
Php Php	Version 5.6.21
Php Php	Version 5.6.22
Php Php	Version 5.6.2
Php Php	Version 5.6.3
Php Php	Version 5.6.4
Php Php	Version 5.6.5
Php Php	Version 5.6.6
Php Php	Version 5.6.7
Php Php	Version 5.6.8
Php Php	Version 5.6.9
Php Php	Version 7.0.7