PT-2010-5018 · Php+1 · Php+1

Maksymilian Arciemowicz · Published 2010-11-08 · Updated 2024-06-15 · CVE-2010-3709

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions PHP versions 5.2.x through 5.2.14 PHP versions 5.3.x through 5.3.3

Description The issue allows context-dependent attackers to cause a denial of service, resulting in a NULL pointer dereference and application crash, via a crafted ZIP archive. This is related to the ZipArchive::getArchiveComment function.

Recommendations For PHP versions 5.2.x through 5.2.14, update to a version outside of this range to resolve the issue. For PHP versions 5.3.x through 5.3.3, update to a version outside of this range to resolve the issue.

Exploit

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2010-3709

DSA-2195-1

OPENSUSE-SU-2024:10290-1

OPENSUSE-SU-2024:10344-1

OPENSUSE-SU-2024:11169-1

RHSA-2011:0195

RHSA-2011_0195

Affected Products

Php

Red Hat

References · 163

• 🔥 http://exploit-db.com/exploits/15431 · Exploit
• 🔥 https://exploit-db.com/exploits/15431 · Exploit
• http://ubuntu.com/usn/USN-1042-1 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052836.html · Vendor Advisory
• http://svn.php.net/viewvc/php/php-src/branches/PHP_5_2/ext/zip/php_zip.c?view=log · Vendor Advisory
• http://php.net/releases/5_3_4.php · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html · Vendor Advisory
• http://php.net/ChangeLog-5.php · Vendor Advisory
• http://marc.info/?l=bugtraq&m=130331363227777&w=2 · Vendor Advisory
• http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.490619 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10290-1 · Vendor Advisory
• http://php.net/archive/2010.php#id2010-12-10-1 · Vendor Advisory
• http://php.net/releases/5_2_15.php · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2010:218 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=133469208622507&w=2 · Vendor Advisory