CVE

Id
49383  
CVE No.
CVE-2011-1471  
Status
Candidate  
Description
Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive file that triggers errors in zip_fread function calls.  
Phase
Assigned (20110319)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
536061 49383 CVE-2011-1471 CONFIRM:http://bugs.php.net/bug.php?id=49072  View
536062 49383 CVE-2011-1471 CONFIRM:http://www.php.net/ChangeLog-5.php  View
536063 49383 CVE-2011-1471 CONFIRM:http://support.apple.com/kb/HT5002  View
536064 49383 CVE-2011-1471 APPLE:APPLE-SA-2011-10-12-3  View
536065 49383 CVE-2011-1471 URL:http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html  View
536066 49383 CVE-2011-1471 DEBIAN:DSA-2266  View
536067 49383 CVE-2011-1471 URL:http://www.debian.org/security/2011/dsa-2266  View
536068 49383 CVE-2011-1471 MANDRIVA:MDVSA-2011:052  View
536069 49383 CVE-2011-1471 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:052  View
536070 49383 CVE-2011-1471 MANDRIVA:MDVSA-2011:053  View
536071 49383 CVE-2011-1471 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2011:053  View
536072 49383 CVE-2011-1471 REDHAT:RHSA-2011:1423  View
536073 49383 CVE-2011-1471 URL:http://www.redhat.com/support/errata/RHSA-2011-1423.html  View
536074 49383 CVE-2011-1471 BID:46975  View
536075 49383 CVE-2011-1471 URL:http://www.securityfocus.com/bid/46975  View
536076 49383 CVE-2011-1471 VUPEN:ADV-2011-0744  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
27124 JVNDB-2012-002831 Linux Kernel の Open Sound System サブシステムにおける整数アンダーフローの脆弱性 不特定の非 x86 プラットフォーム上で稼働する Linux Kernel の Open Sound System (OSS) サブシステムには、整数アンダーフローの脆弱性が存在します。 CVE-2011-1476 49383 4 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002831.html  View