CVEs-PoC/2010/CVE-2010-3709.md

CVE-2010-3709

Description

The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ZIP archive.

POC

Reference

• http://securityreason.com/achievement_securityalert/90
• http://www.exploit-db.com/exploits/15431

Github

• https://github.com/Live-Hack-CVE/CVE-2010-3709