CVE-2015-2331

CVE-2015-2331: Integer overflow in libzip’s _zip_cdir_new (zip_dirent.c) used by PHP ZIP extension. Affected: libzip

CVE-2012-1162

CVE-2012-1162 affects libzip 0.10 and is caused by a heap-based buffer overflow in the _zip_readcdir function within zip_open.c. Exploitation occurs via a crafted ZIP archive where the number of directories is set to 0, enabling a remote attacker to trigger an application crash (DoS) and potentia...