CVE

Id
77068  
CVE No.
CVE-2014-9767  
Status
Candidate  
Description
Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 and ext/zip/ext_zip.cpp in HHVM before 3.12.1 allows remote attackers to create arbitrary empty directories via a crafted ZIP archive.  
Phase
Assigned (20160316)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
706973 77068 CVE-2014-9767 MLIST:[oss-security] 20160316 Re: Three CVE requests for PHP  View
706974 77068 CVE-2014-9767 URL:http://www.openwall.com/lists/oss-security/2016/03/16/20  View
706975 77068 CVE-2014-9767 CONFIRM:http://php.net/ChangeLog-5.php  View
706976 77068 CVE-2014-9767 CONFIRM:https://bugs.php.net/bug.php?id=67996  View
706977 77068 CVE-2014-9767 CONFIRM:https://bugs.php.net/bug.php?id=70350  View
706978 77068 CVE-2014-9767 CONFIRM:https://github.com/facebook/hhvm/commit/65c95a01541dd2fbc9c978ac53bed235b5376686  View
706979 77068 CVE-2014-9767 SUSE:SUSE-SU-2016:1145  View
706980 77068 CVE-2014-9767 URL:http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html  View
706981 77068 CVE-2014-9767 SUSE:SUSE-SU-2016:1166  View
706982 77068 CVE-2014-9767 URL:http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html  View
706983 77068 CVE-2014-9767 SUSE:openSUSE-SU-2016:1167  View
706984 77068 CVE-2014-9767 URL:http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html  View
706985 77068 CVE-2014-9767 SUSE:openSUSE-SU-2016:1173  View
706986 77068 CVE-2014-9767 URL:http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html  View
706987 77068 CVE-2014-9767 UBUNTU:USN-2952-1  View
706988 77068 CVE-2014-9767 URL:http://www.ubuntu.com/usn/USN-2952-1  View
706989 77068 CVE-2014-9767 UBUNTU:USN-2952-2  View
706990 77068 CVE-2014-9767 URL:http://www.ubuntu.com/usn/USN-2952-2  View
706991 77068 CVE-2014-9767 BID:76652  View

Related JVN