CVE-2015-7804 | PHP up to 5.5.29/5.6.13 PHAR Archive ext/phar/zip.c phar_parse_zipfile off-by-one (Bug 70433)

A vulnerability was found in PHP up to 5.5.29/5.6.13. It has been classified as critical. This affects the function phar_parse_zipfile of the file ext/phar/zip.c of the component PHAR Archive Handler. The manipulation leads to off-by-one.

This vulnerability is uniquely identified as CVE-2015-7804. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.