ID:10609 - Exploit for Buffer overflow in PHP - CVE-2023-3824
Published: October 17, 2024
Vulnerability identifier: #VU78978
Vulnerability risk: Critical
CVE-ID: CVE-2023-3824
CWE-ID: CWE-119
Exploitation vector: Remote access
Vulnerable software:
PHP
PHP
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error within the phar_dir_read() function. A remote attacker can force the application to open a specially crafted .phar archive, trigger memory corruption and execute arbitrary code on the target system.
Remediation
Install updates from vendor's website.