CVE-2011-1471
EUVD-2011-147620.03.2011, 02:00
Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive file that triggers errors in zip_fread function calls.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| php | php | 𝑥 < 5.2.11 |
| php | php | 5.3.0 ≤ 𝑥 < 5.3.6 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References