Vulnerability Database

300,445

Total vulnerabilities in the database

CVE-2011-1471

Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive file that triggers errors in zip_fread function calls.

  • Published: Mar 20, 2011
  • Updated: Nov 9, 2025
  • CVE: CVE-2011-1471
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:N/A:P

CWEs:

Software From Fixed in
php / php - 5.2.11
php / php 5.3.0 5.3.6