EDB-17004

PoC

PHP 5.3.5 libzip 0.9.3 - _zip_name_locate Null Pointer Dereference

view exploit source exploit_dbtype dosauthor Maksymilian Arciemowiczpublished 2011-03-18catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2011-0421USmedium4.3Exploit
The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow context-…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan