Skip to content
OpenAdvisories
Unscored DSA-1264-1 6 CVEs

php4

Published Mar 7, 2007 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 3.1 php4 4:4.3.10-19

Vulnerabilities 6

  • Unscored —
    CVE-2007-0906

    Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitra…

  • Unscored —
    CVE-2007-0907

    Buffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via unspecified vectors involving th…

  • Unscored —
    CVE-2007-0908 Public exploit EPSS 13%

    The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize t…

  • Unscored —
    CVE-2007-0909

    Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format s…

  • Unscored —
    CVE-2007-0910

    Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecif…

  • Unscored —
    CVE-2007-0988

    The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows con…