CVE-2011-1471

Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (CPU…

published March 20, 2011

CVSS
—
EPSS
13%
Percentile
96.3
In the wild
Unconfirmed
What it is

Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive file that triggers errors in zip_fread function calls.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.13189 · 96.3th percentile
Published
2011-03-20T01:00Z
EPSS history
Timeline
  • 20 MAR 01:00Z
    Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (CPU…
    cvelistv5