CVE-2012-2386: Integer overflow in the phar_parse_tarfile function in tar.c in the phar extension in PHP before 5.3.14 and...

Security readout for executives and security teams

Older PHP releases can crash, and may be exposed to code execution risk, when handling a specially crafted tar archive through the Phar extension. Business urgency depends on whether any public-facing or partner-facing service still runs PHP before the fixed versions and accepts archive files. Exposure is most likely in legacy PHP systems where the Phar extension is present and applications process untrusted tar or Phar-related archive content. Modern patched PHP branches should not be affected based on the provided version ranges. Prioritize remediation for internet-facing or file-processing systems still running affected PHP versions. The issue is old, but legacy exposure can still matter because the impact includes service crashes and possible code execution. Mitigation focus: Upgrade PHP to 5.3.14, 5.4.4, or a vendor-fixed package.; Apply relevant SUSE, Apple, or distribution security updates where applicable.; Avoid processing untrusted tar or Phar archives on unfixed systems..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.