CVE-2010-3709

Published: Nov 9, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ZIP archive.

Affected (7)

Products: Php: Php · Canonical: Ubuntu Linux

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Php Php	From 5.2.0 to 5.2.15
Php Php	From 5.3.0 to 5.3.4

Configuration B

5 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 10.04
Canonical Ubuntu Linux	Version 10.10
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 8.04
Canonical Ubuntu Linux	Version 9.10

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (52)

http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052836.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2011-January/052845.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=130331363227777&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://marc.info/?l=bugtraq&m=133469208622507&w=2

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://secunia.com/advisories/42729

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/42812

Source: secalert@redhat.com

Broken Link

http://securityreason.com/achievement_securityalert/90

Source: secalert@redhat.com

Third Party Advisory

http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.490619

Source: secalert@redhat.com

Third Party Advisory

http://support.apple.com/kb/HT4581

Source: secalert@redhat.com

Third Party Advisory

http://svn.php.net/viewvc/php/php-src/branches/PHP_5_2/ext/zip/php_zip.c?view=log

Source: secalert@redhat.com

PatchVendor Advisory

http://svn.php.net/viewvc/php/php-src/branches/PHP_5_3/ext/zip/php_zip.c?view=log

Source: secalert@redhat.com

PatchVendor Advisory

http://www.exploit-db.com/exploits/15431

Source: secalert@redhat.com

ExploitThird Party AdvisoryVDB Entry

http://www.mandriva.com/security/advisories?name=MDVSA-2010:218

Source: secalert@redhat.com

Broken Link

http://www.php.net/ChangeLog-5.php

Source: secalert@redhat.com

Vendor Advisory

http://www.php.net/archive/2010.php#id2010-12-10-1

Source: secalert@redhat.com

Vendor Advisory

http://www.php.net/releases/5_2_15.php

Source: secalert@redhat.com

Vendor Advisory

http://www.php.net/releases/5_3_4.php

Source: secalert@redhat.com

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2011-0195.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/bid/44718

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1024690

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/USN-1042-1

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2010/3313

Source: secalert@redhat.com

Permissions Required

http://www.vupen.com/english/advisories/2011/0020

Source: secalert@redhat.com

Permissions Required

http://www.vupen.com/english/advisories/2011/0021

Source: secalert@redhat.com

Permissions Required

http://www.vupen.com/english/advisories/2011/0077

Source: secalert@redhat.com

Permissions Required

http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html