CVE-2010-3709

The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash via a crafted ZIP archive...

Null pointer dereference

The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash via a crafted ZIP archive...

CVE-2010-3709

The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash via a crafted ZIP archive...

CVE-2010-3709

The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash via a crafted ZIP archive...

CVE-2010-3709

CVE-2010-3709 affects PHP’s ZipArchive::getArchiveComment: vulnerable in PHP 5.2.x up to 5.2.14 and 5.3.x up to 5.3.3, enabling context-dependent attackers to cause a denial of service (NULL pointer dereference and crash) via a crafted ZIP archive. Connected documents ( MiracleLinux AXSA advisory...

PHP 5.3.3 / 5.2.14 ZipArchive::getArchiveComment NULL Pointer Dereference

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PHP 5.3.3/5.2.14 ZipArchive::getArchiveComment NULL Pointer Deference Author: Maksymilian Arciemowicz http://securityreason.com/ http://cxib.net/ Date: - - Dis.: 14.09.2010 - - Pub.: 05.11.2010 CVE: CVE-2010-3709 CWE: CWE-476 Status: Fixed in CVS...

PT-2010-5018

Name of the Vulnerable Software and Affected Versions PHP versions 5.2.x through 5.2.14 PHP versions 5.3.x through 5.3.3 Description The issue allows context-dependent attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a crafted ZIP archive...

CVE-2010-3709: Improper Input Validation

The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash via a crafted ZIP archive...

PHP 5.3.3/5.2.14 ZipArchive::getArchiveComment NULL Pointer Deference

Exploit for php platform in category dos / poc ===================================================================== PHP 5.3.3/5.2.14 ZipArchive::getArchiveComment NULL Pointer Deference ===================================================================== PHP 5.3.3/5.2.14...

PHP 5.3.3/5.2.14 - ZipArchive::getArchiveComment Null Pointer Dereference

PHP 5.3.3/5.2.14 ZipArchive::getArchiveComment NULL Pointer Deference Author: Maksymilian Arciemowicz http://securityreason.com/ http://cxib.net/ Date: - Dis.: 14.09.2010 - Pub.: 05.11.2010 CVE: CVE-2010-3709 CWE: CWE-476 Status: Fixed in CVS Affected Software: - PHP 5.3.3 - PHP 5.2.14 Original...

PHP 5.3.35.2.14 - ZipArchive::getArchiveComment Null Pointer Dereference

PHP 5.3.35.2.14 - ZipArchive::getArchiveComment Null Pointer Dereference PHP 5.3.3/5.2.14 ZipArchive::getArchiveComment NULL Pointer Deference Author: Maksymilian Arciemowicz http://securityreason.com/ http://cxib.net/ Date: - Dis.: 14.09.2010 - Pub.: 05.11.2010 CVE: CVE-2010-3709 CWE: CWE-476...

Mandriva Linux Security Advisory : php (MDVSA-2010:218)

Multiple vulnerabilities were discovered and corrected in php : Stack consumption vulnerability in the filtervar function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3, when FILTERVALIDATEEMAIL mode is used, allows remote attackers to cause a denial of service memory consumption and...

openSUSE Security Update : apache2-mod_php5 (apache2-mod_php5-441)

This update of php5 fixes a directory traversal bug in ZipArchive CVE-2008-5658 and a buffer overflow in the mstring extension CVE-2008-5557. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : apache2-mod_php5 (apache2-mod_php5-441)

This update of php5 fixes a directory traversal bug in ZipArchive CVE-2008-5658 and a buffer overflow in the mstring extension CVE-2008-5557. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : php5 vulnerabilities (USN-720-1)

It was discovered that PHP did not properly enforce phpadminvalue and phpadminflag restrictions in the Apache configuration file. A local attacker could create a specially crafted PHP script that would bypass intended security restrictions. This issue only applied to Ubuntu 6.06 LTS, 7.10, and 8....

Mandrake Security Advisory MDVSA-2009:045 (php)

The remote host is missing an update to php announced via advisory MDVSA-2009:045. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

USN-720-1: PHP vulnerabilities

It was discovered that PHP did not properly enforce phpadminvalue and phpadminflag restrictions in the Apache configuration file. A local attacker could create a specially crafted PHP script that would bypass intended security restrictions. This issue only applied to Ubuntu 6.06 LTS, 7.10, and 8....

openSUSE 10 Security Update : apache2-mod_php5 (apache2-mod_php5-5934)

This update of php5 fixes a directory traversal bug in ZipArchive CVE-2008-5658 and a buffer overflow in the mstring extension CVE-2008-5557. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

CVE-2008-5658

Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write arbitrary files via a ZIP file with a file whose name contains .. dot dot sequences...

Directory traversal

Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write arbitrary files via a ZIP file with a file whose name contains .. dot dot sequences...