Vulnetix
Try Vulnetix Request Demo
CVE-2014-9767 PUBLISHED

Directory traversal vulnerability in the ZipArchive::extractTo function in ext/zip/php_zip.c in PHP before 5.4.45, 5.5.x before 5.5.29, and 5.6.x before 5.6.13 and ext/zip/ext_zip.cpp in HHVM before 3.12.1 allows remote attackers to create arbitrary empty directories via a crafted ZIP archive.

EPSS 0.49% · 65.5th percentile

Risk Scores

EPSS Score
0.49%
65.5th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTShhvm0, 3.11.0+dfsg-1, 3.11.1+dfsg-1
Ubuntu:14.04:LTSphp55.5.6+dfsg-1ubuntu2, 5.5.8+dfsg-2ubuntu1, 5.5.9+dfsg-1ubuntu1

Timeline

References

Open in Interactive Console →