The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow context-dependent attackers to cause a denial of service (NULL pointer dereference) via an empty ZIP archive that is processed with a (1) locateName or (2) statName operation.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2011-03-20 02:00
Updated : 2018-10-30 16:26
NVD link : CVE-2011-0421
Mitre link : CVE-2011-0421
CVE.ORG link : CVE-2011-0421
JSON object : View
Products Affected
php
- php
CWE