CVE-2010-3709 in PHP
Summary
The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ZIP archive.
Reservation
10/01/2010
Disclosure
11/08/2010
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 55387 | PHP getArchiveComment input validation | 20 | Proof-of-Concept | Not defined | CVE-2010-3709 |