Lucene search

K
nvd[email protected]NVD:CVE-2011-1471
HistoryMar 20, 2011 - 2:00 a.m.

CVE-2011-1471

2011-03-2002:00:04
CWE-189
web.nvd.nist.gov
1

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

9

Confidence

High

EPSS

0.03

Percentile

91.0%

Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive file that triggers errors in zip_fread function calls.

Affected configurations

Nvd
Node
phpphpRange<5.2.11
OR
phpphpRange5.3.05.3.6

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

9

Confidence

High

EPSS

0.03

Percentile

91.0%