CVE-2015-2331

An integer overflow exists in the _zip_cdir_new function within zip_dirent.c of libzip 0.11.2 and earlier. This library is utilized by the ZIP extension in PHP (versions before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7) and other products. A remote attacker can exploit this by providing...

CVE-2012-1162

CVE-2012-1162 affects libzip 0.10 and is caused by a heap-based buffer overflow in the _zip_readcdir function within zip_open.c. Exploitation occurs via a crafted ZIP archive where the number of directories is set to 0, enabling a remote attacker to trigger an application crash (DoS) and potentia...

CVE-2012-1163

Summary : CVE-2012-1163 is a vulnerability in libzip’s central directory handling. An integer overflow in the function _zip_readcdir (zip_open.c) allows a remote attacker to trigger memory safety violations, leading to possible arbitrary code execution and an information leak. The issue is associ...