php5 - several vulnerabilities

Fixed packages 1

Vulnerabilities 18

• Unscored —
  CVE-2007-1286 Public exploit EPSS 41%

  Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a lon…

  Mar 6, 2007
• Unscored —
  CVE-2007-1375 Public exploit

  Integer overflow in the substr_compare function in PHP 5.2.1 and earlier allows context-dependent attackers to read sen…

  Mar 10, 2007
• Unscored —
  CVE-2007-1376 Public exploit EPSS 10%

  The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that their arguments corresp…

  Mar 10, 2007
• Unscored —
  CVE-2007-1380 Public exploit

  The php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before 5.2.1, allows context…

  Mar 10, 2007
• Unscored —
  CVE-2007-1453 Public exploit

  Buffer underflow in the PHP_FILTER_TRIM_DEFAULT macro in the filtering extension (ext/filter) in PHP 5.2.0 allows conte…

  Mar 14, 2007
• Unscored —
  CVE-2007-1454

  ext/filter in PHP 5.2.0, when FILTER_SANITIZE_STRING is used with the FILTER_FLAG_STRIP_LOW flag, does not properly str…

  Mar 14, 2007
• Unscored —
  CVE-2007-1521 Public exploit

  Double free vulnerability in PHP before 4.4.7, and 5.x before 5.2.2, allows context-dependent attackers to execute arbi…

  Mar 20, 2007
• Unscored —
  CVE-2007-1583 Public exploit

  The mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal register_globals flag an…

  Mar 21, 2007
• Unscored —
  CVE-2007-1700 Public exploit

  The session extension in PHP 4 before 4.4.5, and PHP 5 before 5.2.1, calculates the reference count for the session var…

  Mar 27, 2007
• Unscored —
  CVE-2007-1718 Public exploit

  CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote atta…

  Mar 28, 2007
• Unscored —
  CVE-2007-1777 Public exploit EPSS 16%

  Integer overflow in the zip_read_entry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code…

  Mar 30, 2007
• Unscored —
  CVE-2007-1824

  Buffer overflow in the php_stream_filter_create function in PHP 5 before 5.2.1 allows remote attackers to cause a denia…

  Apr 2, 2007
• Unscored —
  CVE-2007-1887

  Buffer overflow in the sqlite_decode_binary function in the bundled sqlite library in PHP 4 before 4.4.5 and PHP 5 befo…

  Apr 6, 2007
• Unscored —
  CVE-2007-1889

  Integer signedness error in the _zend_mm_alloc_int function in the Zend Memory Manager in PHP 5.2.0 allows remote attac…

  Apr 6, 2007
• Unscored —
  CVE-2007-1900

  CRLF injection vulnerability in the FILTER_VALIDATE_EMAIL filter in ext/filter in PHP 5.2.0 and 5.2.1 allows context-de…

  Apr 10, 2007
• Unscored —
  CVE-2007-2509

  CRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2 allows remote attacke…

  May 9, 2007
• Unscored —
  CVE-2007-2510

  Buffer overflow in the make_http_soap_request function in PHP before 5.2.2 has unknown impact and remote attack vectors…

  May 9, 2007
• Unscored —
  CVE-2007-2511

  Buffer overflow in the user_filter_factory_create function in PHP before 5.2.2 has unknown impact and local attack vect…

  May 9, 2007