php php 4.3.0 vulnerabilities and exploits

(subscribe to this query)

Buffer overflow in the imap_fetch_overview function in the IMAP functionality (php_imap.c) in PHP prior to 4.3.3 allows remote malicious users to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long e-mail address in a (1) To or (2) From h...

Php Php 4.3.0 Php Php 4.3.1 Php Php 4.3.2

The php_check_safe_mode_include_dir function in fopen_wrappers.c of PHP 4.3.x returns a success value (0) when the safe_mode_include_dir variable is not specified in configuration, which differs from the previous failure value and may allow remote malicious users to exploit file ...

Php Php 4.3.0 Php Php 4.3.1 Php Php 4.3.2

1 EDB exploit

Unknown vulnerability in CGI module for PHP 4.3.0 allows malicious users to access arbitrary files as the PHP user, and possibly execute PHP code, by bypassing the CGI force redirect settings (cgi.force_redirect or --enable-force-cgi-redirect).

The IMAP functionality in PHP prior to 4.3.1 allows remote malicious users to cause a denial of service via an e-mail message with a (1) To or (2) From header with an address that contains a large number of "\" (backslash) characters.

Php Php 4.2 Php Php 4.2.0 Php Php 4.2.1 Php Php 4.2.2 Php Php 4.2.3 Php Php 4.3.0

Integer overflow in the exif_process_IFD_TAG function in exif.c in PHP prior to 4.3.11 may allow remote malicious users to execute arbitrary code via an IFD tag that leads to a negative byte count.

Php Php 4.3.0 Php Php 4.3.1 Php Php 4.3.2 Php Php 4.3.3 Php Php 4.3.4 Php Php 4.3.5 Php Php 4.3.6 Php Php 4.3.7 Php Php 4.3.8 Php Php 4.3.9 Php Php 4.3.10

Integer signedness error in emalloc() function for PHP prior to 4.3.2 allow remote malicious users to cause a denial of service (memory consumption) and possibly execute arbitrary code via negative arguments to functions such as (1) socket_recv, (2) socket_recvfrom, and possibly ...

Php Php 4.0 Php Php 4.0.1 Php Php 4.0.2 Php Php 4.0.3 Php Php 4.0.4 Php Php 4.0.5 Php Php 4.0.6 Php Php 4.0.7 Php Php 4.1.0 Php Php 4.1.1 Php Php 4.1.2 Php Php 4.2.0

3 EDB exploits

Integer overflows in (1) base64_encode and (2) the GD library for PHP prior to 4.3.3 have unknown impact and unknown attack vectors.

Php Php 4.0 Php Php 4.0.1 Php Php 4.0.2 Php Php 4.0.3 Php Php 4.0.4 Php Php 4.0.5 Php Php 4.0.6 Php Php 4.0.7 Php Php 4.1.0 Php Php 4.1.1 Php Php 4.1.2 Php Php 4.2

Buffer overflows in PHP prior to 4.3.3 have unknown impact and unknown attack vectors.

Php Php 4.0 Php Php 4.0.1 Php Php 4.0.2 Php Php 4.0.3 Php Php 4.0.4 Php Php 4.0.5 Php Php 4.0.6 Php Php 4.0.7 Php Php 4.1.0 Php Php 4.1.1 Php Php 4.1.2 Php Php 4.2

The mcrypt_create_iv function in ext/mcrypt/mcrypt.c in PHP prior to 4.4.7, 5.2.1, and possibly 5.0.x and other PHP 5 versions, calls php_rand_r with an uninitialized seed variable and therefore always generates the same initialization vector (IV), which might allow context-depen...

Php Php Php Php 4.0.1 Php Php 4.0.2 Php Php 4.0.3 Php Php 4.0.4 Php Php 4.0.5 Php Php 4.0.6 Php Php 4.0.7 Php Php 4.1.0 Php Php 4.1.1 Php Php 4.1.2 Php Php 4.2.0

The exif_read_data function in the Exif module in PHP prior to 4.4.1 allows remote malicious users to cause a denial of service (infinite loop) via a malformed JPEG image.

Php Php 4.0.0 Php Php 4.0.1 Php Php 4.0.2 Php Php 4.0.3 Php Php 4.0.4 Php Php 4.0.5 Php Php 4.0.6 Php Php 4.1.0 Php Php 4.1.1 Php Php 4.1.2 Php Php 4.2.0 Php Php 4.2.1

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook