Description

The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a ziparchive stream that is not properly handled by the stream_get_contents function.

Remediation

References

CVE-2011-1470

Related Vulnerabilities

Oracle Application Server CVE-2009-1008 Vulnerability (CVE-2009-1008)

WordPress Plugin Frontend Post WordPress-AccessPress Anonymous Post includes Backdoor [Only if downloaded via the vendor website] (2.8.0)

Drupal Incorrect Authorization Vulnerability (CVE-2017-6377)

Perl Numeric Errors Vulnerability (CVE-2011-2939)

WordPress Plugin Chat-Support Board-WordPress Chat Cross-Site Scripting (1.2.8)

Severity

Medium

Classification

CVE-2011-1470 CWE-20

Tags

Missing Update Known Vulnerabilities