CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-3709

The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ZIP archive.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.07

EPSS Ranking 91.1%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2010-3709

Php » Php » Version: 5.2.0

cpe:2.3:a:php:php:5.2.0
Php » Php » Version: 5.2.1

cpe:2.3:a:php:php:5.2.1
Php » Php » Version: 5.2.10

cpe:2.3:a:php:php:5.2.10
Php » Php » Version: 5.2.11

cpe:2.3:a:php:php:5.2.11
Php » Php » Version: 5.2.12

cpe:2.3:a:php:php:5.2.12
Php » Php » Version: 5.2.13

cpe:2.3:a:php:php:5.2.13
Php » Php » Version: 5.2.14

cpe:2.3:a:php:php:5.2.14
Php » Php » Version: 5.2.2

cpe:2.3:a:php:php:5.2.2
Php » Php » Version: 5.2.3

cpe:2.3:a:php:php:5.2.3
Php » Php » Version: 5.2.4

cpe:2.3:a:php:php:5.2.4
Php » Php » Version: 5.2.5

cpe:2.3:a:php:php:5.2.5
Php » Php » Version: 5.2.6

cpe:2.3:a:php:php:5.2.6
Php » Php » Version: 5.2.7

cpe:2.3:a:php:php:5.2.7
Php » Php » Version: 5.2.8

cpe:2.3:a:php:php:5.2.8
Php » Php » Version: 5.2.9

cpe:2.3:a:php:php:5.2.9
Php » Php » Version: 5.3.0

cpe:2.3:a:php:php:5.3.0
Php » Php » Version: 5.3.1

cpe:2.3:a:php:php:5.3.1
Php » Php » Version: 5.3.2

cpe:2.3:a:php:php:5.3.2
Php » Php » Version: 5.3.3

cpe:2.3:a:php:php:5.3.3
Canonical » Ubuntu Linux » Version: 10.04

cpe:2.3:o:canonical:ubuntu_linux:10.04
Canonical » Ubuntu Linux » Version: 10.10

cpe:2.3:o:canonical:ubuntu_linux:10.10
Canonical » Ubuntu Linux » Version: 6.06

cpe:2.3:o:canonical:ubuntu_linux:6.06
Canonical » Ubuntu Linux » Version: 8.04

cpe:2.3:o:canonical:ubuntu_linux:8.04
Canonical » Ubuntu Linux » Version: 9.10

cpe:2.3:o:canonical:ubuntu_linux:9.10

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2010-3709

Products

Pricing

Contact Us