PHP » PHP : Security Vulnerabilities Published In 2011 (Overflow)

2011 : January February March April May June July August September October November December

CVSS Scores Greater Than: 0 1 2 3 4 5 6 7 8 9

Sort Results By : CVE Number Descending CVE Number Ascending CVSS Score Descending Number Of Exploits Descending

#	CVE ID	CWE ID	# of Exploits	Vulnerability Type(s)	Publish Date	Update Date	Score	Gained Access Level	Access	Complexity	Authentication	Conf.	Integ.	Avail.
1	CVE-2011-4566	189		DoS Overflow	2011-11-29	2017-08-29	6.4	None	Remote	Low	Not required	Partial	None	Partial
Integer overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4.0beta2 on 32-bit platforms allows remote attackers to read the contents of arbitrary memory locations or cause a denial of service via a crafted offset_val value in an EXIF header in a JPEG file, a different vulnerability than CVE-2011-0708.
2	CVE-2011-3268	119		Overflow	2011-08-25	2017-08-29	10.0	None	Remote	Low	Not required	Complete	Complete	Complete
Buffer overflow in the crypt function in PHP before 5.3.7 allows context-dependent attackers to have an unspecified impact via a long salt argument, a different vulnerability than CVE-2011-2483.
3	CVE-2011-3182			DoS Overflow	2011-08-25	2017-08-29	5.0	None	Remote	Low	Not required	None	None	Partial
PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) or trigger a buffer overflow by leveraging the ability to provide an arbitrary value for a function argument, related to (1) ext/curl/interface.c, (2) ext/date/lib/parse_date.c, (3) ext/date/lib/parse_iso_intervals.c, (4) ext/date/lib/parse_tz.c, (5) ext/date/lib/timelib.c, (6) ext/pdo_odbc/pdo_odbc.c, (7) ext/reflection/php_reflection.c, (8) ext/soap/php_sdl.c, (9) ext/xmlrpc/libxmlrpc/base64.c, (10) TSRM/tsrm_win32.c, and (11) the strtotime function.
4	CVE-2011-1938	119	1	Exec Code Overflow	2011-05-31	2017-08-17	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket.
5	CVE-2011-1466	189		DoS Overflow	2011-03-20	2018-10-30	5.0	None	Remote	Low	Not required	None	None	Partial
Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a large integer in the first argument to the cal_from_jd function.
6	CVE-2011-1464	119		DoS Overflow	2011-03-20	2018-10-30	4.3	None	Remote	Medium	Not required	None	None	Partial
Buffer overflow in the strval function in PHP before 5.3.6, when the precision configuration option has a large value, might allow context-dependent attackers to cause a denial of service (application crash) via a small numerical value in the argument.
7	CVE-2011-1092	189	1	DoS Overflow	2011-03-15	2018-10-30	7.5	None	Remote	Low	Not required	Partial	Partial	Partial
Integer overflow in ext/shmop/shmop.c in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (crash) and possibly read sensitive memory via a large third argument to the shmop_read function.
8	CVE-2011-0755	189		Overflow	2011-02-02	2018-10-30	5.0	None	Remote	Low	Not required	None	Partial	None
Integer overflow in the mt_rand function in PHP before 5.3.4 might make it easier for context-dependent attackers to predict the return values by leveraging a script's use of a large max parameter, as demonstrated by a value that exceeds mt_getrandmax.
9	CVE-2011-0708	119	1	DoS Overflow	2011-03-20	2018-10-30	4.3	None	Remote	Medium	Not required	None	None	Partial
exif.c in the Exif extension in PHP before 5.3.6 on 64-bit platforms performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) via an image with a crafted Image File Directory (IFD) that triggers a buffer over-read.
10	CVE-2010-4698	119		DoS Overflow	2011-01-18	2017-09-19	5.0	None	Remote	Low	Not required	None	None	Partial
Stack-based buffer overflow in the GD extension in PHP before 5.2.15 and 5.3.x before 5.3.4 allows context-dependent attackers to cause a denial of service (application crash) via a large number of anti-aliasing steps in an argument to the imagepstext function.

Total number of vulnerabilities : 10 Page : 1 (This Page)