Description

The (1) ZipArchive::addGlob and (2) ZipArchive::addPattern functions in ext/zip/php_zip.c in PHP 5.3.6 allow context-dependent attackers to cause a denial of service (application crash) via certain flags arguments, as demonstrated by (a) GLOB_ALTDIRFUNC and (b) GLOB_APPEND.

Remediation

References

CVE-2011-1657

Related Vulnerabilities

WordPress Plugin ReviewX-Multi-criteria Rating & Reviews for WooCommerce Cross-Site Request Forgery (1.2.8)

PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23658)

Oracle Application Server CVE-2010-0067 Vulnerability (CVE-2010-0067)

Joomla! Core 3.x.x Information Disclosure (3.4.0 - 3.6.5)

WordPress Plugin iSlidex TimThumb Arbitrary File Upload (2.7)

Severity

Medium

Classification

CVE-2011-1657

Tags

Missing Update Known Vulnerabilities