![Trend Micro Security](https://www.trendmicro.com/content/dam/trendmicro/global/en/global/logo/logo-desktop.png)
PHP ZipArchive Integer Overflow Vulnerability (CVE-2016-3078)
2016年11月9日
危険度: : 緊急
概要
An integer overflow vulnerability exists in PHP. The vulnerability is due to an error in reading zip files, causing a heap buffer overflow. A remote attacker can exploit the vulnerability by sending crafted data to a web application running a vulnerable version of PHP. Successful exploitation could lead to arbitrary code execution with the privileges of the web server. Failed exploit attempts will likely result in denial-of-service conditions.
トレンドマイクロの対策
Apply associated Trend Micro DPI Rules.
対応方法
Trend Micro Deep Security DPI Rule Number: 1007973