CVE-2011-1471
PHP < 5.2.11 - Denial of Service via Malformed Zip Archive Processing
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-1471. PoCs published by TorokAlpar.
AI-analyzed exploit summary This exploit demonstrates a denial-of-service vulnerability in PHP's Zip extension by attempting to read a file with an incorrect CRC from a Zip archive, causing the application to crash. The PoC uses the ZipArchive class to trigger the vulnerability.
Description
Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive file that triggers errors in zip_fread function calls.
Exploits (1)
This exploit demonstrates a denial-of-service vulnerability in PHP's Zip extension by attempting to read a file with an incorrect CRC from a Zip archive, causing the application to crash. The PoC uses the ZipArchive class to trigger the vulnerability.