Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 4.0 | php5 | 5.2.0-8+etch3 |
Vulnerabilities 17
-
Unscored —
Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a lon…
-
Unscored —CVE-2007-1375 Public exploit
Integer overflow in the substr_compare function in PHP 5.2.1 and earlier allows context-dependent attackers to read sen…
-
Unscored —
The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that their arguments corresp…
-
Unscored —CVE-2007-1380 Public exploit
The php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before 5.2.1, allows context…
-
Unscored —CVE-2007-1453 Public exploit
Buffer underflow in the PHP_FILTER_TRIM_DEFAULT macro in the filtering extension (ext/filter) in PHP 5.2.0 allows conte…
-
Unscored —
ext/filter in PHP 5.2.0, when FILTER_SANITIZE_STRING is used with the FILTER_FLAG_STRIP_LOW flag, does not properly str…
-
Unscored —CVE-2007-1521 Public exploit
Double free vulnerability in PHP before 4.4.7, and 5.x before 5.2.2, allows context-dependent attackers to execute arbi…
-
Unscored —CVE-2007-1522 Public exploit
Double free vulnerability in the session extension in PHP 5.2.0 and 5.2.1 allows context-dependent attackers to execute…
-
Unscored —CVE-2007-1583 Public exploit
The mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal register_globals flag an…
-
Unscored —CVE-2007-1700 Public exploit
The session extension in PHP 4 before 4.4.5, and PHP 5 before 5.2.1, calculates the reference count for the session var…
-
Unscored —CVE-2007-1711 Public exploit
Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbi…
-
Unscored —CVE-2007-1718 Public exploit
CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote atta…
-
Unscored —
Integer overflow in the zip_read_entry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code…
-
Unscored —
Buffer overflow in the php_stream_filter_create function in PHP 5 before 5.2.1 allows remote attackers to cause a denia…
-
Unscored —
Buffer overflow in the sqlite_decode_binary function in the bundled sqlite library in PHP 4 before 4.4.5 and PHP 5 befo…
-
Unscored —
Integer signedness error in the _zend_mm_alloc_int function in the Zend Memory Manager in PHP 5.2.0 allows remote attac…
-
Unscored —
CRLF injection vulnerability in the FILTER_VALIDATE_EMAIL filter in ext/filter in PHP 5.2.0 and 5.2.1 allows context-de…