php php 5.2.4 vulnerabilities and exploits

(subscribe to this query)

curl/interface.c in the cURL library (aka libcurl) in PHP 5.2.4 and 5.2.5 allows context-dependent malicious users to bypass safe_mode and open_basedir restrictions and read arbitrary files via a file:// request containing a \x00 sequence, a different vulnerability than CVE-2006-...

Php Php 5.2.4 Php Php 5.2.5

1 EDB exploit

ioncube_loader_win_5.2.dll in the ionCube Loader 6.5 extension for PHP 5.2.4 does not follow safe_mode and disable_functions restrictions, which allows context-dependent malicious users to bypass intended limitations, as demonstrated by reading arbitrary files via the ioncube_rea...

Ioncube Php Encoder 6.5 Php Php 5.2.4

1 EDB exploit

The JSON_parser function (ext/json/JSON_parser.c) in PHP 5.2.x prior to 5.2.9 allows remote malicious users to cause a denial of service (segmentation fault) via a malformed string to the json_decode API function.

Php Php 5.2.0 Php Php 5.2.1 Php Php 5.2.2 Php Php 5.2.3 Php Php 5.2.4 Php Php 5.2.5 Php Php 5.2.6 Php Php 5.2.7 Php Php 5.2.8

The php_zip_make_relative_path function in php_zip.c in PHP 5.2.x prior to 5.2.9 allows context-dependent malicious users to cause a denial of service (crash) via a ZIP file that contains filenames with relative paths, which is not properly handled during extraction.

Php Php 5.2.0 Php Php 5.2.1 Php Php 5.2.2 Php Php 5.2.3 Php Php 5.2.4 Php Php 5.2.5 Php Php 5.2.6 Php Php 5.2.7 Php Php 5.2.8

The safe_mode implementation in PHP prior to 5.2.13 does not properly handle directory pathnames that lack a trailing / (slash) character, which allows context-dependent malicious users to bypass intended access restrictions via vectors related to use of the tempnam function.

Php Php 5.2.0 Php Php 5.2.1 Php Php 5.2.2 Php Php 5.2.3 Php Php 5.2.4 Php Php 5.2.5 Php Php 5.2.6 Php Php 5.2.7 Php Php 5.2.8 Php Php 5.2.9 Php Php 5.2.10 Php Php 5.2.11

The Linear Congruential Generator (LCG) in PHP prior to 5.2.13 does not provide the expected entropy, which makes it easier for context-dependent malicious users to guess values that were intended to be unpredictable, as demonstrated by session cookies generated by using the uniq...

Php Php Php Php 5.2.0 Php Php 5.2.1 Php Php 5.2.2 Php Php 5.2.3 Php Php 5.2.4 Php Php 5.2.5 Php Php 5.2.6 Php Php 5.2.7 Php Php 5.2.8 Php Php 5.2.9 Php Php 5.2.10

1 EDB exploit

The strrchr function in PHP 5.2 prior to 5.2.14 allows context-dependent malicious users to obtain sensitive information (memory contents) or trigger memory corruption by causing a userspace interruption of an internal function or handler.

Php Php 5.2.0 Php Php 5.2.1 Php Php 5.2.2 Php Php 5.2.3 Php Php 5.2.4 Php Php 5.2.5 Php Php 5.2.6 Php Php 5.2.8 Php Php 5.2.9 Php Php 5.2.10 Php Php 5.2.11 Php Php 5.2.12

Stack-based buffer overflow in the GD extension in PHP prior to 5.2.15 and 5.3.x prior to 5.3.4 allows context-dependent malicious users to cause a denial of service (application crash) via a large number of anti-aliasing steps in an argument to the imagepstext function.

Php Php 5.2.0 Php Php 5.2.1 Php Php 5.2.2 Php Php 5.2.3 Php Php 5.2.4 Php Php 5.2.10 Php Php 5.2.11 Php Php 5.2.12 Php Php 5.2.13 Php Php 5.2.14 Php Php 5.3.0 Php Php 5.3.1

Double free vulnerability in the imap_do_open function in the IMAP extension (ext/imap/php_imap.c) in PHP 5.2 prior to 5.2.15 and 5.3 prior to 5.3.4 allows malicious users to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.

Php Php 5.2.0 Php Php 5.2.1 Php Php 5.2.2 Php Php 5.2.3 Php Php 5.2.4 Php Php 5.2.10 Php Php 5.2.11 Php Php 5.2.12 Php Php 5.2.13 Php Php 5.2.14 Php Php 5.3.0 Php Php 5.3.1

Use-after-free vulnerability in the request shutdown functionality in PHP 5.2 prior to 5.2.13 and 5.3 prior to 5.3.2 allows context-dependent malicious users to cause a denial of service (crash) via a stream context structure that is freed before destruction occurs.

Php Php 5.2.0 Php Php 5.2.1 Php Php 5.2.2 Php Php 5.2.3 Php Php 5.2.4 Php Php 5.2.5 Php Php 5.2.6 Php Php 5.2.7 Php Php 5.2.8 Php Php 5.2.9 Php Php 5.2.10 Php Php 5.2.11

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook