Unscored DSA-1647-1 3 CVEs

php5 - several vulnerabilities

Published Oct 7, 2008 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 4.0	php5	5.2.0-8+etch13

Vulnerabilities 3

Unscored —

CVE-2008-3658

Buffer overflow in the imageloadfont function in ext/gd/gd.c in PHP 4.4.x before 4.4.9 and PHP 5.2 before 5.2.6-r6 allo…

Aug 15, 2008
Unscored —

CVE-2008-3659

Buffer overflow in the memnstr function in PHP 4.4.x before 4.4.9 and PHP 5.6 through 5.2.6 allows context-dependent at…

Aug 15, 2008
Unscored —

CVE-2008-3660

PHP 4.4.x before 4.4.9, and 5.x through 5.2.6, when used as a FastCGI module, allows remote attackers to cause a denial…

Aug 15, 2008