This site is deprecated. Please
CLICK HERE for latest updates
Short Name |
HTTP:PHP:INVALID-GLOBAL-FLAG
|
Severity |
Major
|
Recommended |
No
|
Recommended Action |
Drop
|
Category |
HTTP
|
Keywords |
PHP ZipArchive Denial Of Service
|
Release Date |
2016/11/03
|
Update Number |
2801
|
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+
|
HTTP: PHP ZipArchive Denial Of Service
This signature detects attempts to exploit a known vulnerability against PHP. A successful attack can result in a denial-of-service condition.
Extended Description
Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive file that triggers errors in zip_fread function calls.
Affected Products
- Php php 1.0
- Php php 2.0
- Php php 2.0b10
- Php php 3.0
- Php php 3.0.1
- Php php 3.0.10
- Php php 3.0.11
- Php php 3.0.12
- Php php 3.0.13
- Php php 3.0.14
- Php php 3.0.15
- Php php 3.0.16
- Php php 3.0.17
- Php php 3.0.18
- Php php 3.0.2
- Php php 3.0.3
- Php php 3.0.4
- Php php 3.0.5
- Php php 3.0.6
- Php php 3.0.7
- Php php 3.0.8
- Php php 3.0.9
- Php php 4.0
- Php php 4.0.0
- Php php 4.0.1
- Php php 4.0.2
- Php php 4.0.3
- Php php 4.0.4
- Php php 4.0.5
- Php php 4.0.6
- Php php 4.0.7
- Php php 4.1.0
- Php php 4.1.1
- Php php 4.1.2
- Php php 4.2.0
- Php php 4.2.1
- Php php 4.2.2
- Php php 4.2.3
- Php php 4.3.0
- Php php 4.3.1
- Php php 4.3.10
- Php php 4.3.11
- Php php 4.3.2
- Php php 4.3.3
- Php php 4.3.4
- Php php 4.3.5
- Php php 4.3.6
- Php php 4.3.7
- Php php 4.3.8
- Php php 4.3.9
- Php php 4.4.0
- Php php 4.4.1
- Php php 4.4.2
- Php php 4.4.3
- Php php 4.4.4
- Php php 4.4.5
- Php php 4.4.6
- Php php 4.4.7
- Php php 4.4.8
- Php php 4.4.9
- Php php 5.3.0
- Php php 5.3.1
- Php php 5.3.2
- Php php 5.3.3
- Php php 5.3.4
- Php php 5.3.5
References