5.0 RC2 : Security Vulnerabilities (Overflow)

Cpe Name:cpe:/a:php:php:5.0:rc2

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : Cve Number Descending Cve Number Ascending CVSS Score Descending Number Of Exploits Descending

Copy Results Download Results Select Table

#	CVE ID	CWE ID	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2007-2511		Overflow	2007-05-08	2012-10-30	7.2	None	Local	Low	Not required	Complete	Complete	Complete
Buffer overflow in the user_filter_factory_create function in PHP before 5.2.2 has unknown impact and local attack vectors.
2	CVE-2007-2510	119	Overflow	2007-05-08	2012-10-30	5.1	User	Remote	High	Not required	Partial	Partial	Partial
Buffer overflow in the make_http_soap_request function in PHP before 5.2.2 has unknown impact and remote attack vectors, possibly related to "/" (slash) characters.
3	CVE-2007-1890		Exec Code Overflow	2007-04-05	2012-11-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Integer overflow in the msg_receive function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1, on FreeBSD and possibly other platforms, allows context-dependent attackers to execute arbitrary code via certain maxsize values, as demonstrated by 0xffffffff.
4	CVE-2007-1888		Exec Code Overflow	2007-04-05	2012-11-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in the sqlite_decode_binary function in src/encode.c in SQLite 2, as used by PHP 4.x through 5.x and other applications, allows context-dependent attackers to execute arbitrary code via an empty value of the in parameter. NOTE: some PHP installations use a bundled version of sqlite without this vulnerability. The SQLite developer has argued that this issue could be due to a misuse of the sqlite_decode_binary() API.
5	CVE-2007-1887		Exec Code Overflow	2007-04-05	2012-11-05	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in the sqlite_decode_binary function in the bundled sqlite library in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 allows context-dependent attackers to execute arbitrary code via an empty value of the in parameter, as demonstrated by calling the sqlite_udf_decode_binary function with a 0x01 character.
6	CVE-2007-1885		Exec Code Overflow	2007-04-05	2012-11-05	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Integer overflow in the str_replace function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 allows context-dependent attackers to execute arbitrary code via a single character search string in conjunction with a long replacement string, which overflows a 32 bit length counter. NOTE: this is probably the same issue as CVE-2007-0906.6.
7	CVE-2007-1825		Exec Code Overflow	2007-04-02	2012-11-05	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in the imap_mail_compose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5, allows remote attackers to execute arbitrary code via a long boundary string in a type.parameters field. NOTE: as of 20070411, it appears that this issue might be subsumed by CVE-2007-0906.3.
8	CVE-2007-1001	189	Exec Code Overflow	2007-04-05	2011-09-08	6.8	User	Remote	Medium	Not required	Partial	Partial	Partial
Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap (WBMP) images with large width or height values.
9	CVE-2007-0906	119	DoS Exec Code Overflow	2007-02-13	2011-09-20	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors in the (1) session, (2) zip, (3) imap, and (4) sqlite extensions; (5) stream filters; and the (6) str_replace, (7) mail, (8) ibase_delete_user, (9) ibase_add_user, and (10) ibase_modify_user functions. NOTE: vector 6 might actually be an integer overflow (CVE-2007-1885). NOTE: as of 20070411, vector (3) might involve the imap_mail_compose function (CVE-2007-1825).
10	CVE-2006-5465		Exec Code Overflow	2006-11-03	2010-09-15	7.5	User	Remote	Low	Not required	Partial	Partial	Partial
Buffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted UTF-8 inputs to the (1) htmlentities or (2) htmlspecialchars functions.
11	CVE-2006-4812	94	Exec Code Overflow	2006-10-10	2008-09-05	10.0	Admin	Remote	Low	Not required	Complete	Complete	Complete
Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute arbitrary code via an argument to the unserialize PHP function with a large value for the number of array elements, which triggers the overflow in the Zend Engine ecalloc function (Zend/zend_alloc.c).
12	CVE-2004-1065		Exec Code Overflow	2005-01-10	2010-08-21	10.0	Admin	Remote	Low	Not required	Complete	Complete	Complete
Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file.

Total number of vulnerabilities : 12 Page : 1 (This Page)