CVE-2011-1657

CVE-2011-1657 describes a denial-of-service vulnerability affecting PHP 5.3.6. Specifically, the ZipArchive::addGlob and ZipArchive::addPattern functions in the ext/zip/php_zip.c file can be crashed by context-dependent attackers using certain flags arguments like GLOB_ALTDIRFUNC and GLOB_APPEND. This vulnerability has a CVSS score of 5.0, indicating a medium severity. It can be exploited remotely with low attack complexity and no authentication required, leading to a denial of service (application crash). There is no impact on confidentiality or integrity. There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB. The vulnerability has received minimal community discussion and media coverage, suggesting a low profile.