Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

php php 5.4.26 vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2014-3597
Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP prior to 5.4.32 and 5.5.x prior to 5.5.16 allow remote DNS servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted DNS record, related to the dns_g...
Php Php 5.4.10Php Php 5.4.11Php Php 5.4.14Php Php 5.4.15Php Php 5.4.20Php Php 5.4.21Php Php 5.4.29Php Php 5.4.3Php Php 5.4.8Php Php 5.4.9Php Php 5.5.3Php Php 5.5.2Php Php 5.4.0Php Php 5.4.12Php Php 5.4.13Php Php 5.4.17Php Php 5.4.18Php Php 5.4.25Php Php 5.4.26Php Php 5.4.4Php Php 5.4.5Php Php 5.5.7
6.4
CVSSv2
CVE-2014-5120
gd_ctx.c in the GD component in PHP 5.4.x prior to 5.4.32 and 5.5.x prior to 5.5.16 does not ensure that pathnames lack %00 sequences, which might allow remote malicious users to overwrite arbitrary files via crafted input to an application that calls the (1) imagegd, (2) imagegd...
Php Php 5.4.0Php Php 5.4.12Php Php 5.4.13Php Php 5.4.18Php Php 5.4.19Php Php 5.4.25Php Php 5.4.26Php Php 5.4.4Php Php 5.4.5Php Php 5.5.6Php Php 5.5.5Php Php 5.5.12Php Php 5.5.11Php Php 5.5.0Php Php 5.4.10Php Php 5.4.11Php Php 5.4.15Php Php 5.4.21Php Php 5.4.22Php Php 5.4.29Php Php 5.4.3Php Php 5.4.9
5
CVSSv2
CVE-2016-7478
Zend/zend_exceptions.c in PHP, possibly 5.x prior to 5.6.28 and 7.x prior to 7.0.13, allows remote malicious users to cause a denial of service (infinite loop) via a crafted Exception object in serialized data, a related issue to CVE-2015-8876.
Php Php 5.0.0Php Php 5.0.1Php Php 5.0.2Php Php 5.1.3Php Php 5.1.4Php Php 5.2.13Php Php 5.2.14Php Php 5.2.5Php Php 5.2.6Php Php 5.3.11Php Php 5.3.12Php Php 5.3.2Php Php 5.3.20Php Php 5.3.27Php Php 5.3.28Php Php 5.3.9Php Php 5.4.0Php Php 5.4.13Php Php 5.4.14Php Php 5.4.19Php Php 5.4.2Php Php 5.4.26
4.3
CVSSv2
CVE-2014-2497
The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and previous versions, allows remote malicious users to cause a denial of service (NULL pointer dereference and application crash) via a crafted color table in an XPM file.
Php PhpCanonical Ubuntu Linux 15.10Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 12.04Suse Linux Enterprise Server 11Suse Linux Enterprise Software Development Kit 11Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux Server Aus 6.5Redhat Enterprise Linux Server Tus 6.5Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Server Tus 7.3Redhat Enterprise Linux Eus 6.5Redhat Enterprise Linux Eus 7.3Redhat Enterprise Linux Eus 7.4Redhat Enterprise Linux Eus 7.5Redhat Enterprise Linux Eus 7.6Redhat Enterprise Linux Eus 7.7
4.3
CVSSv2
CVE-2012-1571
file prior to 5.11 and libmagic allow remote malicious users to cause a denial of service (crash) via a crafted Composite Document File (CDF) file that triggers (1) an out-of-bounds read or (2) an invalid pointer dereference.
Tim Robbins LibmagicChristos Zoulas File
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook