The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ZIP archive.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Airport | — | Upgrade macOS to the latest versionApply OS X security update 2011-001Apply OS X security update 2011-004 | Aug 28, 2015 | Nov 8, 2010 |
| Apple Osx Php | — | Upgrade macOS to the latest version | Dec 16, 2011 | Nov 8, 2010 |
| Freebsd | — | Upgrade php52-zipUpgrade php5-zip | Dec 10, 2025 | Jan 13, 2011 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Nov 8, 2010 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | Nov 8, 2010 |
| Oracle_linux | — | Upgrade php-mysqlUpgrade php-ldapUpgrade php-recodeUpgrade php-pdoUpgrade php-xmlUpgrade php-bcmathUpgrade php-snmpUpgrade php-embeddedUpgrade php-mbstringUpgrade php-cliUpgrade php-xmlrpcUpgrade php-commonUpgrade php-develUpgrade php-ztsUpgrade php-pspellUpgrade php-processUpgrade php-soapUpgrade php-intlUpgrade php-pgsqlUpgrade php-dbaUpgrade phpUpgrade php-tidyUpgrade php-odbcUpgrade php-imapUpgrade php-enchantUpgrade php-gd | Oct 16, 2024 | Nov 8, 2010 |
| Php | — | Upgrade to PHP version 5.3.3Upgrade to PHP version 5.2.14 | Oct 1, 2012 | Nov 8, 2010 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 19, 2010 |
| Suse | — | Upgrade php8-mysqlUpgrade php8-odbcUpgrade php53-zlibUpgrade php8-sysvmsgUpgrade php8Upgrade php8-fpmUpgrade php7Upgrade php5Upgrade php5-hashUpgrade php5-dbaUpgrade php5-mysqlUpgrade php5-exifUpgrade php8-iconvUpgrade php53-sysvshmUpgrade php53-posixUpgrade php5-jsonUpgrade php7-domUpgrade php53-pcntlUpgrade php53-fileinfoUpgrade php5-pdoUpgrade php7-sqliteUpgrade php53-shmopUpgrade php53-gdUpgrade php5-calendarUpgrade php5-soapUpgrade apache2-mod_php8Upgrade php8-dbaUpgrade php53-pdoUpgrade php53-snmpUpgrade php8-xmlwriterUpgrade php53Upgrade php8-tokenizerUpgrade php53-zipUpgrade php8-mbstringUpgrade php5-odbcUpgrade php53-pearUpgrade php53-odbcUpgrade php53-xmlwriterUpgrade php8-xmlreaderUpgrade php5-sysvsemUpgrade php8-pcntlUpgrade php8-posixUpgrade php5-shmopUpgrade php53-socketsUpgrade php53-sqliteUpgrade php8-soapUpgrade php8-ctypeUpgrade php8-zlibUpgrade php8-pgsqlUpgrade php8-tidyUpgrade php5-snmpUpgrade php53-xmlreaderUpgrade php53-dbaUpgrade php7-jsonUpgrade php53-iconvUpgrade php8-opcacheUpgrade php5-ldapUpgrade php8-gdUpgrade php8-sysvsemUpgrade php5-mbstringUpgrade php5-mcryptUpgrade php8-readlineUpgrade php5-bcmathUpgrade php53-ctypeUpgrade php8-zipUpgrade php53-readlineUpgrade php8-develUpgrade php5-fastcgiUpgrade php5-pearUpgrade php8-fpm-apacheUpgrade php8-gettextUpgrade php8-ftpUpgrade php8-domUpgrade php5-ftpUpgrade php5-bz2Upgrade php8-socketsUpgrade php5-curlUpgrade php5-sysvmsgUpgrade php53-xslUpgrade php8-curlUpgrade php8-cliUpgrade php53-calendarUpgrade php5-xmlreaderUpgrade php8-xslUpgrade php8-snmpUpgrade php7-xmlreaderUpgrade php5-gmpUpgrade php53-imapUpgrade php8-ldapUpgrade php53-domUpgrade php53-sysvmsgUpgrade php5-ctypeUpgrade php5-xmlwriterUpgrade apache2-mod_php5Upgrade php8-fastcgiUpgrade php53-fastcgiUpgrade php53-curlUpgrade php8-sodiumUpgrade php8-pdoUpgrade php53-xmlrpcUpgrade php53-bcmathUpgrade php5-zlibUpgrade php53-ftpUpgrade php8-sqliteUpgrade php53-exifUpgrade php5-pgsqlUpgrade php53-suhosinUpgrade php53-ldapUpgrade php7-iconvUpgrade php8-sysvshmUpgrade php8-embedUpgrade php5-wddxUpgrade php53-tidyUpgrade apache2-mod_php53Upgrade php5-domUpgrade php8-calendarUpgrade php8-fileinfoUpgrade php8-bz2Upgrade php7-ctypeUpgrade php53-opensslUpgrade php5-zipUpgrade php8-opensslUpgrade php5-opensslUpgrade php53-intlUpgrade php7-tokenizerUpgrade php8-gmpUpgrade php7-pdoUpgrade php5-xmlrpcUpgrade php53-jsonUpgrade php53-mcryptUpgrade php5-dbaseUpgrade php53-gettextUpgrade php8-enchantUpgrade php7-develUpgrade php8-bcmathUpgrade php5-suhosinUpgrade php5-pcntlUpgrade apache2-mod_php7Upgrade php8-pharUpgrade php53-mbstringUpgrade php5-iconvUpgrade php53-develUpgrade php53-soapUpgrade php5-gdUpgrade php8-shmopUpgrade php8-ffiUpgrade php53-pgsqlUpgrade php8-intlUpgrade php7-mysqlUpgrade php53-wddxUpgrade php5-tokenizerUpgrade php7-xmlwriterUpgrade php72-develUpgrade php53-bz2Upgrade php7-pgsqlUpgrade php5-sysvshmUpgrade php5-pspellUpgrade php8-exifUpgrade php5-xslUpgrade php53-mysqlUpgrade php53-sysvsemUpgrade php53-gmpUpgrade php53-pspellUpgrade php5-develUpgrade php5-gettextUpgrade php53-tokenizer | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade php5-cgiUpgrade libapache2-mod-php5Upgrade php5-cli | Nov 8, 2024 | Nov 9, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub