Description

The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a ziparchive stream that is not properly handled by the stream_get_contents function.

Remediation

References

CVE-2011-1470

Related Vulnerabilities

WordPress Plugin Live Product Editor for WooCommerce Security Bypass (4.6.2)

WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions Multiple Cross-Site Scripting Vulnerabilities (1.8.4.2)

Jenkins Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2018-1000195)

WordPress Plugin WA Form Builder SQL Injection (1.1)

WordPress Plugin Shortcode for Font Awesome Cross-Site Scripting (1.4)

Severity

Medium

Classification

CVE-2011-1470 CWE-20

Tags

Missing Update Known Vulnerabilities