CVSS: 4.3EPSS: 1%CPEs: 110EXPL: 2CVE-2011-1470 – PHP 5.3.x 'Zip' Extension - 'stream_get_contents()' Denial of Service
https://notcve.org/view.php?id=CVE-2011-1470
The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a ziparchive stream that is not properly handled by the stream_get_contents function. La extensión Zip en PHP anterior a v5.3.6 permite a atacantes dependientes de contexto provocar una denegación de servicio (caída de la aplicación) a través de una cadena ZipArchive que no es manejada de forma correcta por la función stream_get_contents. • https://www.exploit-db.com/exploits/35484 http://bugs.php.net/bug.php?id=53579 http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html http://support.apple.com/kb/HT5002 http://www.mandriva.com/security/advisories?name=MDVSA-2011:052 http://www.mandriva.com/security/advisories?name=MDVSA-2011:053 http://www.php.net/ChangeLog-5.php http://www.securityfocus.com/bid/46969 http://www.vupen.com/english/advisories/2011/0744 • CWE-20: Improper Input Validation •
CVSS: 5.0EPSS: 2%CPEs: 110EXPL: 1CVE-2011-1466 – php: Crash by converting serial day numbers (SDN) into Julian calendar
https://notcve.org/view.php?id=CVE-2011-1466
Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a large integer in the first argument to the cal_from_jd function. Desbordamiento de enteros en la función SdnToJulian en la extensión CAlendar en PHP anterior a v5.3.6 permite a atacantes dependientes de contexto provocar una denegación de servicio (caída de la aplicación) a través de un entero largo en el primer argumento a la función cal_from_jd. • http://bugs.php.net/bug.php?id=53574 http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html http://lists.opensuse.org/opensuse-security-announce/2012-03/msg00016.html http://rhn.redhat.com/errata/RHSA-2012-0071.html http://secunia.com/advisories/48668 http://support.apple.com/kb/HT5002 http://www.debian.org/security/2011/dsa-2266 http://www.mandriva.com/security/advisories?name=MDVSA-2011:052 http://www.mandriva.com/security/advisories?name=MDVSA-2011: • CWE-189: Numeric Errors •
CVSS: 4.3EPSS: 15%CPEs: 110EXPL: 4CVE-2011-1468 – PHP < 5.3.6 'OpenSSL' Extension - 'openssl_decrypt' Ciphertext Data Memory Leak Denial of Service
https://notcve.org/view.php?id=CVE-2011-1468
Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of service (memory consumption) via (1) plaintext data to the openssl_encrypt function or (2) ciphertext data to the openssl_decrypt function. Múltiples fugas de memoria en la extensión OpenSSL de PHP anteriores a v5.3.6 podría permitir a atacantes remotos provocar una denegación de servicio (consumo de memoria) a través de (1) datos en texto plano sobre la función openssl_encrypt o (2) Los datos de texto cifrado a la función openssl_decrypt. • https://www.exploit-db.com/exploits/35487 https://www.exploit-db.com/exploits/35486 http://bugs.php.net/bug.php?id=54060 http://bugs.php.net/bug.php?id=54061 http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html http://support.apple.com/kb/HT5002 http://www.mandriva.com/security/advisories?name=MDVSA-2011:053 http://www.php.net/ChangeLog-5.php http://www.redhat.com/support/errata/RHSA-2011-1423.html http://www.securityfocus.com/bid/46 • CWE-399: Resource Management Errors CWE-401: Missing Release of Memory after Effective Lifetime •
CVSS: 4.3EPSS: 1%CPEs: 110EXPL: 1CVE-2011-1469 – php: DoS when using HTTP proxy with the FTP wrapper
https://notcve.org/view.php?id=CVE-2011-1469
Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) by accessing an ftp:// URL during use of an HTTP proxy with the FTP wrapper. Vulnerabilidad no especificada en el componente Streams en PHP anterior a v5.3.6 permite a atacantes dependientes de contexto provocar una denegación de servicio (caída de la aplicación) mediante el acceso a una dirección URL ftp:// durante el uso de un proxy HTTP con la envoltura de FTP. • http://bugs.php.net/bug.php?id=54092 http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html http://support.apple.com/kb/HT5002 http://www.mandriva.com/security/advisories?name=MDVSA-2011:052 http://www.mandriva.com/security/advisories?name=MDVSA-2011:053 http://www.php.net/ChangeLog-5.php http://www.redhat.com/support/errata/RHSA-2011-1423.html http://www.securityfocus.com/bid/46970 http://www.vupen.com/english/advisories/2011/0744 https://ac •
CVSS: 4.3EPSS: 3%CPEs: 2EXPL: 2CVE-2011-1471 – PHP < 5.3.6 'Zip' Extension - 'zip_fread()' Denial of Service
https://notcve.org/view.php?id=CVE-2011-1471
Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive file that triggers errors in zip_fread function calls. Error de entero sin signo en zip_stream.c en la extensión Zip en PHP anteriores a v5.3.6 permite a atacantes dependientes de contexto para provocar una denegación de servicio (consumo de CPU) a través de un archivo con formato incorrecto que provoca un error en la llamada a la función zip_fread. • https://www.exploit-db.com/exploits/35485 http://bugs.php.net/bug.php?id=49072 http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html http://support.apple.com/kb/HT5002 http://www.debian.org/security/2011/dsa-2266 http://www.mandriva.com/security/advisories?name=MDVSA-2011:052 http://www.mandriva.com/security/advisories?name=MDVSA-2011:053 http://www.php.net/ChangeLog-5.php http://www.redhat.com/support/errata/RHSA-2011-1423.html http://ww • CWE-189: Numeric Errors •