CVE-2015-2331
HighSummary
Heap-based buffer overflow caused by integer overflow in the _zip_cdir_new function in libzip 0.11.2 and earlier, used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7. Remote attackers can cause application crashes or potentially execute arbitrary code via a ZIP archive containing many entries.
Risk Assessment
This vulnerability can lead to application crashes, disrupting service operations and allowing attackers to execute malicious code, posing a serious security threat to the system.
Recommendation
It is recommended to update PHP to version 5.4.39, 5.5.23, or 5.6.7 or later to mitigate this vulnerability. Additionally, monitoring and restricting the ability of users to upload ZIP archives is advisable.
Other vulnerabilities in libzip
Original NVD description (English source)
Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a ZIP archive that contains many entries, leading to a heap-based buffer overflow.