| Release Date | Jan 05, 2010 |
| Severity | High |
| Impact | System Compromise: Remote attackers can gain control of vulnerable systems. |
| Description | This indicates an attack attempt against a buffer-overflow vulnerability in the PHP library.
The vulnerability is caused by an error when the vulnerable software handles a malicious zip url. It allows a remote attacker to execute arbitrary code via sending a crafted PHP file. |
| Affected Products | PHP 5.2.0 and PHP with PECL ZIP <= 1.8.3 |
| Recommended Actions | Upgrade to the latest version, available from the following web site:
http://www.php.net/downloads.php |
| Reference/s | http://www.php-security.org/MOPB/MOPB-16-2007.html
|