NetSight
IP …
medium4.3Public exploit code

CVE-2011-1470

The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a ziparchive stream that is not p…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a ziparchive stream that is not properly handled by the stream_get_contents function.

Affected products

VendorProductAffected versions
PhpPhp
through 5.3.5
Versions 1.0, 2.0, 2.0b10, 3.0, 3.0.1

Weakness classification

CWE-20

References