Skip to content
OpenAdvisories
Unscored DTSA-40-1 7 CVEs

php4 - several vulnerabilities

Published May 28, 2007 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 5.0 php4 6:4.4.4-9+lenny1

Vulnerabilities 7

  • Unscored —
    CVE-2007-1286 Public exploit EPSS 41%

    Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a lon…

  • Unscored —
    CVE-2007-1380 Public exploit

    The php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before 5.2.1, allows context…

  • Unscored —
    CVE-2007-1521 Public exploit

    Double free vulnerability in PHP before 4.4.7, and 5.x before 5.2.2, allows context-dependent attackers to execute arbi…

  • Unscored —
    CVE-2007-1583 Public exploit

    The mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal register_globals flag an…

  • Unscored —
    CVE-2007-1718 Public exploit

    CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote atta…

  • Unscored —
    CVE-2007-1777 Public exploit EPSS 16%

    Integer overflow in the zip_read_entry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code…

  • Unscored —
    CVE-2007-2509

    CRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2 allows remote attacke…