CVE-2014-9767
MEDIUM
4.3
CVSS 3.0
Description
Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 and ext/zip/ext_zip.cpp in HHVM before 3.12.1 allows remote attackers to create arbitrary empty directories via a crafted ZIP archive.
Affected products and versions
- PHP — Up to and including 5.4.45
- PHP versions 5.5.0, 5.5.1, 5.5.2, 5.5.3, 5.5.4, 5.5.5, 5.5.6, 5.5.7, 5.5.8, 5.5.9, 5.5.10, 5.5.11, 5.5.12, 5.5.13, 5.5.14, 5.5.18, 5.5.19, 5.5.20, 5.5.21, 5.5.22, 5.5.23, 5.5.24, 5.5.25, 5.5.26, 5.5.27, 5.5.28, 5.6.0, 5.6.1, 5.6.2, 5.6.3, 5.6.4, 5.6.5, 5.6.6, 5.6.7, 5.6.8, 5.6.9, 5.6.10, 5.6.11, 5.6.12
References
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00052.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00056.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00057.html
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00058.html
- php.net http://php.net/ChangeLog-5.php
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2016-2750.html
- www.openwall.com http://www.openwall.com/lists/oss-security/2016/03/16/20
- www.securityfocus.com http://www.securityfocus.com/bid/76652
- www.securitytracker.com http://www.securitytracker.com/id/1035311
- www.ubuntu.com http://www.ubuntu.com/usn/USN-2952-1
- www.ubuntu.com http://www.ubuntu.com/usn/USN-2952-2
- bugs.php.net https://bugs.php.net/bug.php?id=67996 Exploit
- bugs.php.net https://bugs.php.net/bug.php?id=70350 Exploit
- github.com https://github.com/facebook/hhvm/commit/65c95a01541dd2fbc9c978ac53bed235b5376686
- nvd.nist.gov Official NVD record