Lucene search

CVE-2010-3709

🗓️ 08 Nov 2010 00:00:00Reported by ubuntu.comType

The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows attackers to cause a denial of service via a crafted ZIP archive

Reporter	Title	Published	Views	Family All 103
Packet Storm	PHP 5.3.3 / 5.2.14 ZipArchive::getArchiveComment NULL Pointer Dereference	8 Nov 201000:00	–	packetstorm
OpenVAS	FreeBSD Ports: php5-zip	24 Jan 201100:00	–	openvas
OpenVAS	FreeBSD Ports: php5-zip	24 Jan 201100:00	–	openvas
OpenVAS	PHP 'filter_var()' function Stack Consumption Vulnerability	23 Nov 201000:00	–	openvas
OpenVAS	FreeBSD Ports: php5	24 Jan 201100:00	–	openvas
OpenVAS	Slackware: Security Advisory (SSA:2010-357-01)	10 Sep 201200:00	–	openvas
OpenVAS	Mandriva Update for php MDVSA-2010:218 (php)	16 Nov 201000:00	–	openvas
OpenVAS	Mandriva Update for php MDVSA-2010:218 (php)	16 Nov 201000:00	–	openvas
OpenVAS	Slackware Advisory SSA:2010-357-01 php	11 Sep 201200:00	–	openvas
OpenVAS	Oracle: Security Advisory (ELSA-2011-0195)	6 Oct 201500:00	–	openvas

Source	Link
ubuntu	www.ubuntu.com/security/notices/USN-1042-1
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2010-3709
launchpad	www.launchpad.net/bugs/cve/CVE-2010-3709
security-tracker	www.security-tracker.debian.org/tracker/CVE-2010-3709

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	8.04	noarch	php5	5.2.4-2ubuntu5.13	UNKNOWN
ubuntu	9.10	noarch	php5	5.2.10.dfsg.1-2ubuntu6.6	UNKNOWN
ubuntu	10.04	noarch	php5	5.3.2-1ubuntu4.6	UNKNOWN
ubuntu	10.10	noarch	php5	5.3.3-1ubuntu9.2	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 Nov 2010 00:00Current

3.7Low risk

Vulners AI Score3.7

CVSS24.3

EPSS0.002