NetSight
IP …
medium4.3Public exploit code

CVE-2010-3709

The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ZIP archive.

Affected products

VendorProductAffected versions
PhpPhp
from 5.2.0 before 5.2.15
from 5.3.0 before 5.3.4
CanonicalUbuntu Linux
Versions 6.06, 8.04, 9.10, 10.04, 10.10

Weakness classification

CWE-20

References