4.0 Beta 4 Patch1 : Security Vulnerabilities (Denial Of Service)

Cpe Name:cpe:/a:php:php:4.0:beta_4_patch1

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : Cve Number Descending Cve Number Ascending CVSS Score Descending Number Of Exploits Descending

Copy Results Download Results Select Table

#	CVE ID	CWE ID	# of Exploits	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2012-2386	189		DoS Exec Code Overflow	2012-07-07	2012-09-21	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Integer overflow in the phar_parse_tarfile function in tar.c in the phar extension in PHP before 5.3.14 and 5.4.x before 5.4.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted tar file that triggers a heap-based buffer overflow.
2	CVE-2011-3267	399		DoS	2011-08-25	2012-02-03	5.0	None	Remote	Low	Not required	None	None	Partial
PHP before 5.3.7 does not properly implement the error_log function, which allows context-dependent attackers to cause a denial of service (application crash) via unspecified vectors.
3	CVE-2011-3182			DoS Overflow	2011-08-25	2012-02-03	5.0	None	Remote	Low	Not required	None	None	Partial
PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) or trigger a buffer overflow by leveraging the ability to provide an arbitrary value for a function argument, related to (1) ext/curl/interface.c, (2) ext/date/lib/parse_date.c, (3) ext/date/lib/parse_iso_intervals.c, (4) ext/date/lib/parse_tz.c, (5) ext/date/lib/timelib.c, (6) ext/pdo_odbc/pdo_odbc.c, (7) ext/reflection/php_reflection.c, (8) ext/soap/php_sdl.c, (9) ext/xmlrpc/libxmlrpc/base64.c, (10) TSRM/tsrm_win32.c, and (11) the strtotime function.
4	CVE-2011-1471	189		DoS	2011-03-19	2012-01-18	4.3	None	Remote	Medium	Not required	None	None	Partial
Integer signedness error in zip_stream.c in the Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive file that triggers errors in zip_fread function calls.
5	CVE-2011-1470	20		DoS	2011-03-19	2011-10-20	4.3	None	Remote	Medium	Not required	None	None	Partial
The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a ziparchive stream that is not properly handled by the stream_get_contents function.
6	CVE-2011-1469			DoS	2011-03-19	2012-01-18	4.3	None	Remote	Medium	Not required	None	None	Partial
Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) by accessing an ftp:// URL during use of an HTTP proxy with the FTP wrapper.
7	CVE-2011-1468	399		DoS	2011-03-19	2012-01-18	4.3	None	Remote	Medium	Not required	None	None	Partial
Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of service (memory consumption) via (1) plaintext data to the openssl_encrypt function or (2) ciphertext data to the openssl_decrypt function.
8	CVE-2011-1467			DoS	2011-03-19	2011-10-20	5.0	None	Remote	Low	Not required	None	None	Partial
Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in the Intl extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via an invalid argument, a related issue to CVE-2010-4409.
9	CVE-2011-1466	189		DoS Overflow	2011-03-19	2012-11-05	5.0	None	Remote	Low	Not required	None	None	Partial
Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a large integer in the first argument to the cal_from_jd function.
10	CVE-2011-1464	119		DoS Overflow	2011-03-19	2011-04-08	4.3	None	Remote	Medium	Not required	None	None	Partial
Buffer overflow in the strval function in PHP before 5.3.6, when the precision configuration option has a large value, might allow context-dependent attackers to cause a denial of service (application crash) via a small numerical value in the argument.
11	CVE-2011-1153	134		DoS Exec Code Mem. Corr. +Info	2011-03-16	2011-10-20	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Multiple format string vulnerabilities in phar_object.c in the phar extension in PHP 5.3.5 and earlier allow context-dependent attackers to obtain sensitive information from process memory, cause a denial of service (memory corruption), or possibly execute arbitrary code via format string specifiers in an argument to a class method, leading to an incorrect zend_throw_exception_ex call.
12	CVE-2011-1148	399		DoS Mem. Corr.	2011-03-18	2012-02-03	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Use-after-free vulnerability in the substr_replace function in PHP 5.3.6 and earlier allows context-dependent attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact by using the same variable for multiple arguments.
13	CVE-2011-1092	189	1	DoS Overflow	2011-03-15	2011-10-20	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (crash) and possibly read sensitive memory via a large third argument to the shmop_read function.
14	CVE-2011-0753	362		DoS Mem. Corr.	2011-02-02	2011-07-18	4.3	None	Remote	Medium	Not required	None	None	Partial
Race condition in the PCNTL extension in PHP before 5.3.4, when a user-defined signal handler exists, might allow context-dependent attackers to cause a denial of service (memory corruption) via a large number of concurrent signals.
15	CVE-2011-0708	119	1	DoS Overflow	2011-03-19	2012-11-05	4.3	None	Remote	Medium	Not required	None	None	Partial
exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) via an image with a crafted Image File Directory (IFD) that triggers a buffer over-read.
16	CVE-2011-0421		1	DoS	2011-03-19	2011-10-27	4.3	None	Remote	Medium	Not required	None	None	Partial
The _zip_name_locate function in zip_name_locate.c in the Zip extension in PHP before 5.3.6 does not properly handle a ZIPARCHIVE::FL_UNCHANGED argument, which might allow context-dependent attackers to cause a denial of service (NULL pointer dereference) via an empty ZIP archive that is processed with a (1) locateName or (2) statName operation.
17	CVE-2010-4697	399		DoS Mem. Corr.	2011-01-18	2011-07-18	6.8	None	Remote	Medium	Not required	Partial	Partial	Partial
Use-after-free vulnerability in the Zend engine in PHP before 5.2.15 and 5.3.x before 5.3.4 might allow context-dependent attackers to cause a denial of service (heap memory corruption) or have unspecified other impact via vectors related to use of __set, __get, __isset, and __unset methods on objects accessed by a reference.
18	CVE-2010-4409	189	1	DoS Overflow	2010-12-06	2012-06-22	5.0	None	Remote	Low	Not required	None	None	Partial
Integer overflow in the NumberFormatter::getSymbol (aka numfmt_get_symbol) function in PHP 5.3.3 and earlier allows context-dependent attackers to cause a denial of service (application crash) via an invalid argument.
19	CVE-2009-3294	134		DoS	2009-09-22	2009-11-25	5.0	None	Remote	Low	Not required	None	None	Partial
The popen API function in TSRM/tsrm_win32.c in PHP before 5.2.11 and 5.3.x before 5.3.1, when running on certain Windows operating systems, allows context-dependent attackers to cause a denial of service (crash) via a crafted (1) "e" or (2) "er" string in the second argument (aka mode), possibly related to the _fdopen function in the Microsoft C runtime library. NOTE: this might not cross privilege boundaries except in rare cases in which the mode argument is accessible to an attacker outside of an application that uses the popen function.
20	CVE-2008-7068	20		DoS	2009-08-25	2009-08-25	6.4	None	Remote	Low	Not required	None	Partial	Partial
The dba_replace function in PHP 5.2.6 and 4.x allows context-dependent attackers to cause a denial of service (file truncation) via a key with the NULL byte. NOTE: this might only be a vulnerability in limited circumstances in which the attacker can modify or add database entries but does not have permissions to truncate the file.
21	CVE-2007-0988	119		DoS Overflow	2007-02-20	2011-05-25	4.3	None	Remote	Medium	Not required	None	None	Partial
The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attackers to cause a denial of service (infinite loop) by unserializing certain integer expressions, which only cause 32-bit arguments to be used after the check for a negative value, as demonstrated by an "a:2147483649:{" argument.
22	CVE-2002-2215			DoS	2002-12-31	2008-09-05	5.0	None	Remote	Low	Not required	None	None	Partial
The imap_header function in the IMAP functionality for PHP before 4.3.0 allows remote attackers to cause a denial of service via an e-mail message with a large number of "To" addresses, which triggers an error in the rfc822_write_address function.

Total number of vulnerabilities : 22 Page : 1 (This Page)