Description
Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a ZIP archive that contains many entries, leading to a heap-based buffer overflow.
Remediation
References
Related Vulnerabilities
WordPress Plugin iMember360 Multiple Vulnerabilities (3.9.001)
WordPress Plugin Accept Donations with PayPal Cross-Site Request Forgery (1.3.3)
Microsoft SQL Server Other Vulnerability (CVE-2003-0232)
ownCloud Improper Authentication Vulnerability (CVE-2014-9045)
WordPress Plugin kk Star Ratings 'root' Parameter Remote File Include (1.7)