Lucene search
FreeBSD2A41233D-10E7-11E0-BECC-0022156E8794HistoryDec 13, 2010 - 12:00 a.m.
php-zip -- multiple Denial of Service vulnerabilities
2010-12-1300:00:00
vuxml.freebsd.org
25
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
EPSS
0.002
Percentile
62.1%
The following DoS conditions in Zip extension
were fixed in PHP 5.3.4 and PHP 5.2.15:
Fixed crash in zip extract method (possible
CWE-170).
The ZipArchive::getArchiveComment function
in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3
allows context-dependent attackers to cause a denial
of service (NULL pointer dereference and application
crash) via a crafted ZIP archive.
Related
openvas
openvas
FreeBSD Ports: php5-zip
2011-01-24 00:00:00
FreeBSD Ports: php5-zip
2011-01-24 00:00:00
PHP 'filter_var()' function Stack Consumption Vulnerability
2010-11-23 00:00:00
packetstorm
packetstorm
PHP 5.3.3 / 5.2.14 ZipArchive::getArchiveComment NULL Pointer Dereference
2010-11-08 00:00:00
exploitpack
exploitpack
PHP 5.3.35.2.14 - ZipArchive::getArchiveComment Null Pointer Dereference
2010-11-05 00:00:00
seebug
seebug
PHP ZipArchive::getArchiveComment()ε½ζ°η©ΊζιεΌη¨ζη»ζε‘ζΌζ΄
2010-11-10 00:00:00
prion
prion
Null pointer dereference
2010-11-09 01:00:00
nessus
nessus
cve
cve
CVE-2010-3709
2010-11-09 01:00:02
ubuntucve
ubuntucve
CVE-2010-3709
2010-11-08 00:00:00
cvelist
cvelist
CVE-2010-3709
2010-11-08 23:00:00
nvd
nvd
CVE-2010-3709
2010-11-09 01:00:02
zdt
zdt
PHP 5.3.3/5.2.14 ZipArchive::getArchiveComment NULL Pointer Deference
2010-11-06 00:00:00
exploitdb
exploitdb
PHP 5.3.3/5.2.14 - ZipArchive::getArchiveComment Null Pointer Dereference
2010-11-05 00:00:00
slackware
slackware
[slackware-security] php
2010-12-24 03:35:50
securityvulns
securityvulns
[ MDVSA-2010:218 ] php
2010-11-02 00:00:00
PHP multiple security vulnerabilities
2010-11-24 00:00:00
[USN-1042-1] PHP vulnerabilities
2011-01-13 00:00:00
oraclelinux
oraclelinux
php security, bug fix, and enhancement update
2013-11-25 00:00:00
php security update
2011-02-10 00:00:00
redhat
redhat
(RHSA-2011:0195) Moderate: php security update
2011-02-03 00:00:00
osv
osv
php5 - several
2011-03-19 00:00:00
debian
debian
[SECURITY] [DSA 2195-1] php5 security update
2011-03-19 23:49:52
ubuntu
ubuntu
PHP vulnerabilities
2011-01-11 00:00:00
fedora
fedora
[SECURITY] Fedora 14 Update: php-5.3.4-1.fc14.1
2011-01-04 20:55:36
[SECURITY] Fedora 13 Update: php-5.3.4-1.fc13.1
2011-01-04 20:53:11
[SECURITY] Fedora 13 Update: maniadrive-1.2-23.fc13
2011-01-04 20:53:11
f5
f5
SOL13518 - Multiple PHP vulnerabilities
2012-04-04 00:00:00
Multiple PHP vulnerabilities
2012-04-05 02:07:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2011-10-10 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
EPSS
0.002
Percentile
62.1%
Related for 2A41233D-10E7-11E0-BECC-0022156E8794