CVE-2016-4473

Critical

Published: 08/06/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In PHP versions 7.0.7 and 5.6.x, a vulnerability allows remote attackers to execute arbitrary code. This issue was introduced as part of an incomplete fix for CVE-2015-6833.

Risk Assessment

Exploitation of this vulnerability could lead to server takeover, posing a serious threat to the security of the organization's data and systems.

Recommendation

It is recommended to update PHP to the latest version to eliminate this vulnerability and to monitor systems for unauthorized activities.

Original NVD description (English source)

/ext/phar/phar_object.c in PHP 7.0.7 and 5.6.x allows remote attackers to execute arbitrary code. NOTE: Introduced as part of an incomplete fix to CVE-2015-6833.