CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.3. Its EPSS score suggests a 13.2% probability of exploitation in the next 30 days. It may lead to a denial-of-service condition.
CVE
CVE-2011-1471
Severity
MEDIUM
CVSS
4.3
EPSS
13.19%
Original NVD Description
Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive file that triggers errors in zip_fread function calls.