CVE-2016-5773

phpzip.c in the zip extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service use-after-free and application crash...

Integer overflow

Multiple integer overflows in phpzip.c in the zip extension in PHP before 7.0.6 allow remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted call to 1 getFromIndex or 2 getFromName in the ZipArchive...

Ubuntu: Security Advisory (USN-2984-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-3078

Multiple integer overflows in phpzip.c in the zip extension in PHP before 7.0.6 allow remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted call to 1 getFromIndex or 2 getFromName in the ZipArchive...

UBUNTU-CVE-2016-3078

Multiple integer overflows in phpzip.c in the zip extension in PHP before 7.0.6 allow remote attackers to cause a denial of service heap-based buffer overflow and application crash or possibly have unspecified other impact via a crafted call to 1 getFromIndex or 2 getFromName in the ZipArchive...

PHP ZIP extension _zip_cdir_new function integer overflow vulnerability

PHP is a popular programming language. An integer overflow vulnerability in the zipcdirnew function in zipdirent.c in libzip 0.11.2, used in the PHP ZIP extension, allows remote attackers to exploit via a special ZIP archive to crash an application or execute arbitrary code...

DEBIAN-CVE-2015-2331

Integer overflow in the zipcdirnew function in zipdirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other products, allows remote attackers to cause a denial of service application crash or possibly execute...

CVE-2015-2331: Undefined Security Weakness

Integer overflow in the zipcdirnew function in zipdirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other products, allows remote attackers to cause a denial of service application crash or possibly execute...

MGASA-2014-0164 Updated libzip package fixes crashes using php-zip

The libzip library has been updated to version 0.11.2, which fixes crashes that affected php-zip and possibly other users of the library...

Updated libzip package fixes crashes using php-zip

The libzip library has been updated to version 0.11.2, which fixes crashes that affected php-zip and possibly other users of the library...

PT-2014-9125

Name of the Vulnerable Software and Affected Versions libzip affected versions not specified Description The issue concerns crashes in the libzip library that affected php-zip and possibly other users of the library. Recommendations At the moment, there is no information about a newer version tha...

CentOS Update for php53 CESA-2011:1423 centos5 x86_64

Check for the Version of php53 OpenVAS Vulnerability Test CentOS Update for php53 CESA-2011:1423 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

DEBIAN-CVE-2011-0421

The zipnamelocate function in zipnamelocate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FLUNCHANGED argument, which might allow context-dependent attackers to cause a denial of service NULL pointer dereference via an empty ZIP archive that is processed with a...

CVE-2011-1470: Improper Input Validation

The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service application crash via a ziparchive stream that is not properly handled by the streamgetcontents function...

FreeBSD : php-zip -- multiple Denial of Service vulnerabilities (2a41233d-10e7-11e0-becc-0022156e8794)

The following DoS conditions in Zip extension were fixed in PHP 5.3.4 and PHP 5.2.15 : - Fixed crash in zip extract method possible CWE-170. - The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of...