NetSight
IP …
high7.5

CVE-2015-2331

Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.…

Impact

Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a ZIP archive that contains many entries, leading to a heap-based buffer overflow.

Affected products

VendorProductAffected versions
NihLibzip
through 0.11.2
PhpPhp
through 5.4.38
Versions 5.5.0, 5.5.1, 5.5.2, 5.5.3, 5.5.4
DebianDebian Linux
Version 7.0
FedoraprojectFedora
Version 22
OpensuseOpensuse
Versions 13.1, 13.2

Weakness classification

CWE-189

References