CVE-2015-3307

HIGH · CVSS 7.5 EPSS 7.70%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2015-06-09 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2015-3307

Severity

HIGH

CVSS

7.5

EPSS

7.70%

Original Filing — NVD Description

The phar_parse_metadata function in ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to cause a denial of service (heap metadata corruption) or possibly have unspecified other impact via a crafted tar archive.