Unscored DSA-1282-1 7 CVEs

php4

Published Apr 26, 2007 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 3.1	php4	4:4.3.10-20
Debian · 4.0	php4	6:4.4.4-8+etch2

Vulnerabilities 7

Unscored —

CVE-2007-1286 Public exploit EPSS 41%

Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a lon…

Mar 6, 2007
Unscored —

CVE-2007-1380 Public exploit

The php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before 5.2.1, allows context…

Mar 10, 2007
Unscored —

CVE-2007-1521 Public exploit

Double free vulnerability in PHP before 4.4.7, and 5.x before 5.2.2, allows context-dependent attackers to execute arbi…

Mar 20, 2007
Unscored —

CVE-2007-1583 Public exploit

The mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal register_globals flag an…

Mar 21, 2007
Unscored —

CVE-2007-1711 Public exploit

Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbi…

Mar 27, 2007
Unscored —

CVE-2007-1718 Public exploit

CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote atta…

Mar 28, 2007
Unscored —

CVE-2007-1777 Public exploit EPSS 16%

Integer overflow in the zip_read_entry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code…

Mar 30, 2007