Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive file that triggers errors in zip_fread function calls.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Osx Apache | — | Upgrade macOS to the latest versionApply OS X security update 2011-006 | Aug 28, 2015 | Mar 19, 2011 |
| Apple Osx Php | — | Apply OS X security update 2011-006 | Dec 16, 2011 | Mar 19, 2011 |
| Centos_linux | — | Upgrade php53-snmpUpgrade php53-soapUpgrade php53-ldapUpgrade php53-cliUpgrade php53-commonUpgrade php53-processUpgrade php53-pgsqlUpgrade php53-dbaUpgrade php53-pdoUpgrade php53-mbstringUpgrade php53-bcmathUpgrade php53-develUpgrade php53-gdUpgrade php53-xmlrpcUpgrade php53-pspellUpgrade php53-xmlUpgrade php53-intlUpgrade php53-odbcUpgrade php53-mysqlUpgrade php53-imapUpgrade php53 | Dec 1, 2016 | Mar 19, 2011 |
| Gentoo Linux | — | Upgrade dev-lang/php. | Oct 30, 2017 | Mar 19, 2011 |
| Hpsmh | — | Upgrade to the latest version of HP System Management Homepage | Oct 13, 2015 | Mar 19, 2011 |
| Oracle_linux | — | Upgrade php53-cliUpgrade php53-xmlrpcUpgrade php-xmlrpcUpgrade php53-processUpgrade php-dbaUpgrade php53-bcmathUpgrade php-processUpgrade php53-soapUpgrade php53-intlUpgrade php-pgsqlUpgrade php53-pgsqlUpgrade php-odbcUpgrade php-commonUpgrade php-tidyUpgrade php-mbstringUpgrade php-xmlUpgrade php53-ldapUpgrade php53-mysqlUpgrade php-snmpUpgrade php-cliUpgrade php-mysqlUpgrade php53-develUpgrade php-develUpgrade php53-snmpUpgrade php-imapUpgrade php53Upgrade php53-gdUpgrade php-ztsUpgrade php-bcmathUpgrade php53-xmlUpgrade php53-odbcUpgrade php-ldapUpgrade php53-commonUpgrade php53-pspellUpgrade php-embeddedUpgrade php-pdoUpgrade php-enchantUpgrade php53-mbstringUpgrade php-recodeUpgrade php-intlUpgrade php53-imapUpgrade php-gdUpgrade php53-pdoUpgrade php-pspellUpgrade php53-dbaUpgrade phpUpgrade php-soap | Oct 16, 2024 | Mar 20, 2011 |
| Php | — | Upgrade to PHP version 5.3.6 | Oct 1, 2012 | Mar 19, 2011 |
| Suse | — | Upgrade php5-soapUpgrade php5-pdoUpgrade php5-dbaseUpgrade php5-mcryptUpgrade php5-pcntlUpgrade php5Upgrade php5-hashUpgrade php5-mysqlUpgrade php5-zlibUpgrade php5-gmpUpgrade php5-dbaUpgrade php5-bcmathUpgrade apache2-mod_php5Upgrade php5-curlUpgrade php5-calendarUpgrade php5-bz2Upgrade php5-tokenizerUpgrade php5-sysvshmUpgrade php5-wddxUpgrade php5-pgsqlUpgrade php5-xmlreaderUpgrade php5-jsonUpgrade php5-xmlwriterUpgrade php5-odbcUpgrade php5-domUpgrade php5-pearUpgrade php5-sysvsemUpgrade php5-gdUpgrade php5-xmlrpcUpgrade php5-gettextUpgrade php5-ftpUpgrade php5-snmpUpgrade php5-sysvmsgUpgrade php5-iconvUpgrade php5-suhosinUpgrade php5-exifUpgrade php5-pspellUpgrade php5-fastcgiUpgrade php5-ctypeUpgrade php5-zipUpgrade php5-xslUpgrade php5-opensslUpgrade php5-shmopUpgrade php5-ldapUpgrade php5-mbstring | Dec 12, 2013 | Jun 28, 2013 |
| Ubuntu | — | Upgrade php5-cgiUpgrade php-pearUpgrade libapache2-mod-php5Upgrade php5-devUpgrade php5-commonUpgrade php5-cliUpgrade php5Upgrade php5-curlUpgrade php5-gdUpgrade php5-intl | Nov 8, 2024 | Mar 20, 2011 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub