CVE-2016-4473 REJECTED

/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code. NOTE: Introduced as part of an incomplete fix to CVE-2015-6833.

EPSS 16.82% · 94.9th percentile

Risk Scores

EPSS Score
16.82%
94.9th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTSphp50, 5.5.3+dfsg-1ubuntu2, 5.5.3+dfsg-1ubuntu3
Ubuntu:16.04:LTSphp7.00, 7.0.1-5, 7.0.1-6

Timeline

References

Open in Interactive Console →