CVE-2010-3709

Опубликовано: 09 нояб. 2010

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ZIP archive.

Ссылки

http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html
Mailing List
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052836.html
Mailing List
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052845.html
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=130331363227777&w=2
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=130331363227777&w=2
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=133469208622507&w=2
Mailing List
Third Party Advisory
http://marc.info/?l=bugtraq&m=133469208622507&w=2
Mailing List
Third Party Advisory
http://secunia.com/advisories/42729
Broken Link
http://secunia.com/advisories/42812
Broken Link
http://securityreason.com/achievement_securityalert/90
Third Party Advisory
http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.490619
Third Party Advisory
http://support.apple.com/kb/HT4581
Third Party Advisory
http://svn.php.net/viewvc/php/php-src/branches/PHP_5_2/ext/zip/php_zip.c?view=log
Patch
Vendor Advisory
http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/ext/zip/php_zip.c?view=log
Patch
Vendor Advisory
http://www.exploit-db.com/exploits/15431
Exploit
Third Party Advisory
VDB Entry
http://www.mandriva.com/security/advisories?name=MDVSA-2010:218
Broken Link
http://www.php.net/ChangeLog-5.php
Vendor Advisory
http://www.php.net/archive/2010.php#id2010-12-10-1
Vendor Advisory
http://www.php.net/releases/5_2_15.php
Vendor Advisory
http://www.php.net/releases/5_3_4.php
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:php:php:*:*:*:*:*:*:*:*

Версия от 5.2.0 (включая) до 5.2.15 (исключая)

cpe:2.3:a:php:php:*:*:*:*:*:*:*:*

Версия от 5.3.0 (включая) до 5.3.4 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:-:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.07367

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2010-3709

ubuntu

больше 14 лет назад

CVE-2010-3709

redhat

больше 14 лет назад

CVE-2010-3709

debian

больше 14 лет назад

The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 ...

GHSA-rh65-964j-gj4h

github

около 3 лет назад

ELSA-2011-0195

oracle-oval

больше 14 лет назад

ELSA-2011-0195: php security update (MODERATE)

EPSS

Процентиль: 91%

0.07367

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-20