Every CVE Search/ Get API key

CVE-2010-3709

The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3...

4.3 MediumPublic exploit

The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ZIP archive.

Exploit likelihood

13.3%Up 8.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ZIP archive.

Record
CVE-2010-3709
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ZIP archive.

Record
CVE-2010-3709
Updated
2026-11-02
EUVDEUVD-2010-3691 No score

The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ZIP archive.

Record
EUVD-2010-3691
Updated
2026-11-03
GitHub AdvisoriesGHSA-rh65-964j-gj4h No score

The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3...

The ZipArchive::getArchiveComment function in PHP 5.2.x through 5.2.14 and 5.3.x through 5.3.3 allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted ZIP archive.

Record
GHSA-rh65-964j-gj4h
Weakness
CWE-20
Updated
2026-11-02
OSVopenSUSE-SU-2024:10290-1 No score

apache2-mod_php7-7.0.14-1.4 on GA media

These are all security issues fixed in the apache2-mod_php7-7.0.14-1.4 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10290-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10344-1 No score

apache2-mod_php5-5.6.28-1.1 on GA media

These are all security issues fixed in the apache2-mod_php5-5.6.28-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10344-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:11169-1 No score

php8-8.0.11-1.1 on GA media

These are all security issues fixed in the php8-8.0.11-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:11169-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
php5
Debian:5.0
From an advisory covering 6 CVEs
before 5.2.6.dfsg.1-1+lenny10, plus listed versions
5.2.6.dfsg.1-1+lenny25.2.6.dfsg.1-1+lenny35.2.6.dfsg.1-1+lenny45.2.6.dfsg.1-1+lenny65.2.6.dfsg.1-1+lenny85.2.6.dfsg.1-1+lenny9
5.2.6.dfsg.1-1+lenny10
php5
Debian:6.0
From an advisory covering 6 CVEs
before 5.3.3-7+squeeze1, plus listed versions
5.3.3-7
5.3.3-7+squeeze1
php
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-bcmath
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-cli
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-common
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-dba
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-devel
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-embedded
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
Show 103 moreShow less
Affected packages
PackageAffectedFixed
php-enchant
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-gd
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-imap
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-intl
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-ldap
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-mbstring
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-mysql
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-odbc
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-pdo
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-pgsql
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-process
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-pspell
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-recode
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-snmp
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-soap
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-tidy
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-xml
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-xmlrpc
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-zts
Red Hat:enterprise_linux:6::client
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-bcmath
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-cli
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-common
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-dba
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-devel
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-embedded
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-enchant
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-gd
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-imap
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-intl
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-ldap
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-mbstring
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-mysql
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-odbc
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-pdo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-pgsql
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-process
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-pspell
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-recode
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-snmp
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-soap
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-tidy
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-xml
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-xmlrpc
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-zts
Red Hat:enterprise_linux:6::computenode
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-bcmath
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-dba
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-devel
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-embedded
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-enchant
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-imap
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-intl
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-mbstring
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-process
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-pspell
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-recode
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-snmp
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-tidy
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-zts
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-cli
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-common
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-gd
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-ldap
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-mysql
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-odbc
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-pdo
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-pgsql
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-soap
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-xml
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-xmlrpc
Red Hat:enterprise_linux:6::server
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-bcmath
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-dba
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-devel
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-embedded
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-enchant
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-imap
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-intl
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-mbstring
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-process
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-pspell
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-recode
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-snmp
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-tidy
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-zts
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-cli
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-common
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-gd
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-ldap
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-mysql
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-odbc
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-pdo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-pgsql
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-soap
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-xml
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php-xmlrpc
Red Hat:enterprise_linux:6::workstation
From an advisory covering 4 CVEs
before 0:5.3.2-6.el6_0.1
0:5.3.2-6.el6_0.1
php7
openSUSE:Tumbleweed
From an advisory covering 70 CVEs
before 7.0.14-1.4
7.0.14-1.4
php5
openSUSE:Tumbleweed
From an advisory covering 71 CVEs
before 5.6.28-1.1
5.6.28-1.1
php8
openSUSE:Tumbleweed
From an advisory covering 97 CVEs
before 8.0.11-1.1
8.0.11-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBPHP 5.3.3/5.2.14 - ZipArchive::getArchiveComment Null Pointer Dereference2010-11-05

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2010-3709 is a medium vulnerability (CVSS 4.3) in Php, published November 8, 2010. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 13.3%, the 96th percentile. No source names a fixed version.

References

Show 155 moreShow less
MoveEnter Open