PT-2010-5018 · Php+1 · Php+1

Maksymilian Arciemowicz · Publicado 2010-11-08 · Atualizado 2024-06-15 · CVE-2010-3709

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions PHP versions 5.2.x through 5.2.14 PHP versions 5.3.x through 5.3.3

Description The issue allows context-dependent attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a crafted ZIP archive. This is related to the ZipArchive::getArchiveComment function.

Recommendations For PHP versions 5.2.x through 5.2.14, update to a version outside of this range to resolve the issue. For PHP versions 5.3.x through 5.3.3, update to a version outside of this range to resolve the issue.

Exploit

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2010-3709

DSA-2195-1

OPENSUSE-SU-2024:10290-1

OPENSUSE-SU-2024:10344-1

OPENSUSE-SU-2024:11169-1

RHSA-2011:0195

RHSA-2011_0195

Produtos afetados

Php

Red Hat

Referências · 163

• 🔥 http://exploit-db.com/exploits/15431 · Exploit
• 🔥 https://exploit-db.com/exploits/15431 · Exploit
• https://suse.com/security/cve/CVE-2014-3622 · Nota
• https://suse.com/security/cve/CVE-2019-9020 · Nota
• https://suse.com/security/cve/CVE-2010-2225 · Nota
• https://suse.com/security/cve/CVE-2012-3365 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3709 · Nota
• https://suse.com/security/cve/CVE-2010-3710 · Nota
• https://suse.com/security/cve/CVE-2006-1494 · Nota
• https://suse.com/security/cve/CVE-2015-3415 · Nota
• http://ubuntu.com/usn/USN-1042-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2020-7063 · Nota
• https://suse.com/security/cve/CVE-2012-2336 · Nota
• https://suse.com/security/cve/CVE-2019-11039 · Nota
• https://suse.com/security/cve/CVE-2011-3379 · Nota