php php 5.1.1 vulnerabilities and exploits

(subscribe to this query)

Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow remote malicious users to execute arbitrary code via format string specifiers in MySQL error messages.

Php Php 5.1.0 Php Php 5.1.1

The (1) file_exists and (2) imap_reopen functions in PHP prior to 5.1.5 do not check for the safe_mode and open_basedir settings, which allows local users to bypass the settings. NOTE: the error_log function is covered by CVE-2006-3011, and the imap_open function is covered by CV...

Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.4

Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP prior to 5.1.5 allows remote malicious users to have an unknown impact via a GIF file with input_code_size greater than MAX_LWZ_BITS, which triggers an overflow when initializing t...

Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.4

The stripos function in PHP prior to 5.1.5 has unknown impact and attack vectors related to an out-of-bounds read.

Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.4

Integer overflow in memory allocation routines in PHP prior to 5.1.6, when running on a 64-bit system, allows context-dependent malicious users to bypass the memory_limit restriction.

Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.4 Php Php 5.1.5

Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent malicious users to execute arbitrary code via a long FileName parameter. NOTE: this issue was originally reported to be in the imagepsloadfont function in php_gd2...

Php Php 5.2.3 T1lib T1lib 5.1.1

2 EDB exploits

Multiple HTTP response splitting vulnerabilities in PHP 5.1.1 allow remote malicious users to inject arbitrary HTTP headers via a crafted Set-Cookie header, related to the (1) session extension (aka ext/session) and the (2) header function.

Php Php 5.0 Php Php 5.0.0 Php Php 5.0.1 Php Php 5.0.2 Php Php 5.0.3 Php Php 5.0.4 Php Php 5.0.5 Php Php 5.1.0 Php Php 5.1.1

Buffer overflow in PHP prior to 5.2.0 allows remote malicious users to execute arbitrary code via crafted UTF-8 inputs to the (1) htmlentities or (2) htmlspecialchars functions.

Php Php Php Php 5.0 Php Php 5.0.0 Php Php 5.0.1 Php Php 5.0.2 Php Php 5.0.3 Php Php 5.0.4 Php Php 5.0.5 Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.3

Unspecified vulnerabilities in PHP, probably prior to 5.2.0, allow local users to bypass open_basedir restrictions and perform unspecified actions via unspecified vectors involving the (1) chdir and (2) tempnam functions. NOTE: the tempnam vector might overlap CVE-2006-1494.

Php Php Php Php 5.0 Php Php 5.0.0 Php Php 5.0.1 Php Php 5.0.2 Php Php 5.0.3 Php Php 5.0.4 Php Php 5.0.5 Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.3

Buffer overflow in the php_stream_filter_create function in PHP 5 prior to 5.2.1 allows remote malicious users to cause a denial of service (application crash) via a php://filter/ URL that has a name ending in the '.' character.

Php Php 5.0.0 Php Php 5.0.1 Php Php 5.0.2 Php Php 5.0.3 Php Php 5.0.4 Php Php 5.0.5 Php Php 5.1.0 Php Php 5.1.1 Php Php 5.1.2 Php Php 5.1.3 Php Php 5.1.4 Php Php 5.1.5

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook