CVE-2011-1470

PHP <5.3.6 - DoS

Title source: llm

Description

The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a ziparchive stream that is not properly handled by the stream_get_contents function.

Exploits (1)

exploitdb WORKING POC VERIFIED
by paulgao · phpdosphp
https://www.exploit-db.com/exploits/35484

Scores

EPSS 0.0306
EPSS Percentile 86.7%

Details

CWE
CWE-20
Status published
Products (45)
php/php 1.0
php/php 2.0
php/php 2.0b10
php/php 3.0
php/php 3.0.1
php/php 3.0.2
php/php 3.0.3
php/php 3.0.4
php/php 3.0.5
php/php 3.0.6
... and 35 more
Published Mar 20, 2011
Tracked Since Feb 18, 2026