NVD

Id
7490  
Name
CVE-2011-0421  
Description
The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow context-dependent attackers to cause a denial of service (NULL pointer dereference) via an empty ZIP archive that is processed with a (1) locateName or (2) statName operation.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2011-03-19  
Modified Date
2016-08-22  
Seq
2011-0421  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
42199 7490 CVE-2011-0421 http://bugs.php.net/bug.php?id=53885  View
42200 7490 CVE-2011-0421 APPLE-SA-2011-10-12-3  View
42201 7490 CVE-2011-0421 FEDORA-2011-3636  View
42202 7490 CVE-2011-0421 FEDORA-2011-3666  View
42203 7490 CVE-2011-0421 FEDORA-2011-3614  View
42204 7490 CVE-2011-0421 SUSE-SR:2011:009  View
42205 7490 CVE-2011-0421 SSRT100826  View
42206 7490 CVE-2011-0421 20110318 libzip 0.9.3 _zip_name_locate NULL Pointer Dereference (incl PHP 5.3.5)  View
42207 7490 CVE-2011-0421 8146  View
42208 7490 CVE-2011-0421 http://support.apple.com/kb/HT5002  View
42209 7490 CVE-2011-0421 http://svn.php.net/viewvc/?view=revision&revision=307867  View
42210 7490 CVE-2011-0421 DSA-2266  View
42211 7490 CVE-2011-0421 17004  View
42212 7490 CVE-2011-0421 MDVSA-2011:052  View
42213 7490 CVE-2011-0421 MDVSA-2011:053  View
42214 7490 CVE-2011-0421 MDVSA-2011:099  View
42215 7490 CVE-2011-0421 http://www.php.net/archive/2011.php  View
42216 7490 CVE-2011-0421 http://www.php.net/ChangeLog-5.php  View
42217 7490 CVE-2011-0421 http://www.php.net/releases/5_3_6.php  View
42218 7490 CVE-2011-0421 20110318 libzip 0.9.3 _zip_name_locate NULL Pointer Dereference (incl PHP 5.3.5)  View
42219 7490 CVE-2011-0421 46354  View
42220 7490 CVE-2011-0421 ADV-2011-0744  View
42221 7490 CVE-2011-0421 ADV-2011-0764  View
42222 7490 CVE-2011-0421 ADV-2011-0890  View
42223 7490 CVE-2011-0421 libzip-zipnamelocate-dos(66173)  View
42224 7490 CVE-2011-0421 https://bugzilla.redhat.com/show_bug.cgi?id=688735  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31151 JVNDB-2011-001390 PHP の Zip 拡張モジュール内にある _zip_name_locate 関数におけるサービス運用妨害 (DoS) の脆弱性 PHP の Zip 拡張モジュール内にある zip_name_locate.c の _zip_name_locate 関数は、ZIPARCHIVE::FL_UNCHANGED 引数を適切に処理しないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2011-0421 48328 CVE-2011-0421 7490 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001390.html 2011-03-17 2011-04-21 View