NetSight
IP …
medium4.3Public exploit code

CVE-2011-1471

Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (CPU consumpt…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive file that triggers errors in zip_fread function calls.

Affected products

VendorProductAffected versions
PhpPhp
before 5.2.11
from 5.3.0 before 5.3.6

Weakness classification

CWE-189

References