PHP <= 4.4.4 Zip_Entry_Read() Integer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/23169/info PHP is prone to an integer-overflow vulnerability because it fails to ensure that integer values aren't overrun. Attackers may exploit this issue to cause a heap-based buffer overflow. Exploiting this issue may...

PHP < 4.4.5 Integer Overflow Vulnerability

PHP is prone to an integer overflow vulnerability because it fails to ensure that integer values aren SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

PHP zip_entry_read&#40;&#41; function integer overflow

Integer overflow leads to heap memory buffer overflow...

MOPB-35-2007:PHP 4 zip_entry_read&#40;&#41; Integer Overflow Vulnerability

Summary The zipreadentry function that is used to read the content of a file stored inside a .ZIP archive is vulnerable to an integer overflow in memory allocation that leads to an exploitable bufferoverflow. Affected versions Affected are PHP 4 4.4.5 Detailed information The zipreadentry functio...

PHP Zip_Entry_Read()整数溢出漏洞

PHP是一款广泛使用的WEB开发脚本语言。 PHP zipreadentry函数存在整数溢出问题，远程攻击者可利用此漏洞以应用程序权限执行任意指令。 zipreadentry函数没有对提供的长度参数进行任何检查，因此当增加一个字节到终止ASCIIZ字符时会在内存分配时出现整数溢出： buf = emalloclen + 1; ret = zzipreadentry-fp, buf, len; bufret = 0; 当提供的长度为0xffffffff，分配内存块会变成0字节大小。而之后会从ZIP档中读取4GB数据到内存块，造成覆盖分配的内存数据可能导致任意指令执行。 PHP PHP...

PHP 4.4.4 - Zip_Entry_Read() Integer Overflow

PHP 4.4.4 - ZipEntryRead Integer Overflow source: https://www.securityfocus.com/bid/23169/info PHP is prone to an integer-overflow vulnerability because it fails to ensure that integer values aren't overrun. Attackers may exploit this issue to cause a heap-based buffer overflow. Exploiting this...

PHP 4.4.4 - &#039;Zip_Entry_Read()&#039; Integer Overflow

source: https://www.securityfocus.com/bid/23169/info PHP is prone to an integer-overflow vulnerability because it fails to ensure that integer values aren't overrun. Attackers may exploit this issue to cause a heap-based buffer overflow. Exploiting this issue may allow attackers to execute...