| Package | Affected versions | Patched versions |
|---|---|---|
| php | ≥ 5.2.0, < 5.2.15≥ 5.3.0, < 5.3.4 | 5.2.155.3.4 |
The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ZIP archive.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free