CVE-2011-0421

🗓️ 20 Mar 2011 01:00:00Reported by certccType

_zip_name_locate function in PHP Zip extension allows context-dependent attackers to cause a denial of service via an empty ZIP archive

Reporter	Title	Published	Views	Family All 111
zdt	libzip 0.9.3 _zip_name_locate NULL Pointer Dereference (incl PHP 5.3.5)	19 Mar 201100:00	–	zdt
nessus	PHP 5.3.x < 5.3.6 Multiple Vulnerabilities	18 Mar 201100:00	–	nessus
nessus	PHP 5.3 < 5.3.6 String To Double Conversion DoS	18 Mar 201100:00	–	nessus
nessus	Debian DSA-2266-1 : php5 - several vulnerabilities	5 Jul 201100:00	–	nessus
nessus	Fedora 15 : maniadrive-1.2-29.fc15 / php-5.3.6-1.fc15 / php-eaccelerator-0.9.6.1-6.fc15 (2011-3614)	27 Mar 201100:00	–	nessus
nessus	Fedora 14 : maniadrive-1.2-27.fc14 / php-5.3.6-1.fc14 / php-eaccelerator-0.9.6.1-6.fc14 (2011-3636)	7 Apr 201100:00	–	nessus
nessus	Fedora 13 : maniadrive-1.2-27.fc13 / php-5.3.6-1.fc13 / php-eaccelerator-0.9.6.1-6.fc13 (2011-3666)	7 Apr 201100:00	–	nessus
nessus	FreeBSD : php -- ZipArchive segfault with FL_UNCHANGED on empty archive (fe853666-56ce-11e0-9668-001fd0d616cf)	27 Mar 201100:00	–	nessus
nessus	GLSA-201110-06 : PHP: Multiple vulnerabilities	12 Oct 201100:00	–	nessus
nessus	Mac OS X Multiple Vulnerabilities (Security Update 2011-006)	13 Oct 201100:00	–	nessus

NVD

Node

php phpRange≤5.3.5

php phpMatch1.0

php phpMatch2.0

php phpMatch2.0b10

php phpMatch3.0

php phpMatch3.0.1

php phpMatch3.0.2

php phpMatch3.0.3

php phpMatch3.0.4

php phpMatch3.0.5

php phpMatch3.0.6

php phpMatch3.0.7

php phpMatch3.0.8

php phpMatch3.0.9

php phpMatch3.0.10

php phpMatch3.0.11

php phpMatch3.0.12

php phpMatch3.0.13

php phpMatch3.0.14

php phpMatch3.0.15

php phpMatch3.0.16

php phpMatch3.0.17

php phpMatch3.0.18

php phpMatch4.0

php phpMatch4.0beta_4_patch1

php phpMatch4.0beta1

php phpMatch4.0beta2

php phpMatch4.0beta3

php phpMatch4.0beta4

php phpMatch4.0.0

php phpMatch4.0.1

php phpMatch4.0.2

php phpMatch4.0.3

php phpMatch4.0.4

php phpMatch4.0.5

php phpMatch4.0.6

php phpMatch4.0.7

php phpMatch4.1.0

php phpMatch4.1.1

php phpMatch4.1.2

php phpMatch4.2.0

php phpMatch4.2.1

php phpMatch4.2.2

php phpMatch4.2.3

php phpMatch4.3.0

php phpMatch4.3.1

php phpMatch4.3.2

php phpMatch4.3.3

php phpMatch4.3.4

php phpMatch4.3.5

php phpMatch4.3.6

php phpMatch4.3.7

php phpMatch4.3.8

php phpMatch4.3.9

php phpMatch4.3.10

php phpMatch4.3.11

php phpMatch4.4.0

php phpMatch4.4.1

php phpMatch4.4.2

php phpMatch4.4.3

php phpMatch4.4.4

php phpMatch4.4.5

php phpMatch4.4.6

php phpMatch4.4.7

php phpMatch4.4.8

php phpMatch4.4.9

php phpMatch5.0.0

php phpMatch5.0.0beta1

php phpMatch5.0.0beta2

php phpMatch5.0.0beta3

php phpMatch5.0.0beta4

php phpMatch5.0.0rc1

php phpMatch5.0.0rc2

php phpMatch5.0.0rc3

php phpMatch5.0.1

php phpMatch5.0.2

php phpMatch5.0.3

php phpMatch5.0.4

php phpMatch5.0.5

php phpMatch5.1.0

php phpMatch5.1.1

php phpMatch5.1.2

php phpMatch5.1.3

php phpMatch5.1.4

php phpMatch5.1.5

php phpMatch5.1.6

php phpMatch5.2.0

php phpMatch5.2.1

php phpMatch5.2.2

php phpMatch5.2.3

php phpMatch5.2.4

php phpMatch5.2.4windows

php phpMatch5.2.5

php phpMatch5.2.6

php phpMatch5.2.7

php phpMatch5.2.8

php phpMatch5.2.9

php phpMatch5.2.10

php phpMatch5.2.11

php phpMatch5.2.12

php phpMatch5.2.13

php phpMatch5.2.14

php phpMatch5.2.15

php phpMatch5.2.16

php phpMatch5.2.17

php phpMatch5.3.0

php phpMatch5.3.1

php phpMatch5.3.2

php phpMatch5.3.3

php phpMatch5.3.4

Source	Link
securityfocus	www.securityfocus.com/bid/46354
svn	www.svn.php.net/viewvc/
lists	www.lists.opensuse.org/opensuse-security-announce/2011-05/msg00005.html
marc	www.marc.info/
vupen	www.vupen.com/english/advisories/2011/0764
mandriva	www.mandriva.com/security/advisories
lists	www.lists.fedoraproject.org/pipermail/package-announce/2011-March/056642.html
php	www.php.net/ChangeLog-5.php
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/66173
php	www.php.net/releases/5_3_6.php

16 Jun 2026 23:27Current

7.1High risk

Vulners AI Score7.1

CVSS 24.3

EPSS0.13514