CVE-2011-1470
PHP < 5.3.6 - Denial of Service via ZipArchive Stream Handling
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-1470. PoCs published by paulgao.
AI-analyzed exploit summary This exploit demonstrates a denial-of-service vulnerability in PHP's Zip extension by attempting to read a specific file within a JAR archive, which can cause the application to crash. The PoC leverages the `ZipArchive` class to trigger the vulnerability in versions prior to PHP 5.3.6.
Description
The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a ziparchive stream that is not properly handled by the stream_get_contents function.
Exploits (1)
This exploit demonstrates a denial-of-service vulnerability in PHP's Zip extension by attempting to read a specific file within a JAR archive, which can cause the application to crash. The PoC leverages the `ZipArchive` class to trigger the vulnerability in versions prior to PHP 5.3.6.