Red Hat Security AdvisoryRHSA-2007:0155
php security update
Released 2007-04-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 php-4.3.2-40.ent, php-4.3.2-40.ent.i386, php-devel-4.3.2-40.ent +11
- Red Hat Enterprise Linux AS version 3 php-4.3.2-40.ent, php-4.3.2-40.ent.i386, php-4.3.2-40.ent.ia64 +25
- Red Hat Enterprise Linux AS version 4 php-4.3.9-3.22.4, php-4.3.9-3.22.4.i386, php-4.3.9-3.22.4.ia64 +47
- Red Hat Enterprise Linux Desktop version 4 php-4.3.9-3.22.4, php-4.3.9-3.22.4.i386, php-devel-4.3.9-3.22.4 +25
- Red Hat Enterprise Linux ES version 3 php-4.3.2-40.ent, php-4.3.2-40.ent.i386, php-4.3.2-40.ent.ia64 +18
- Red Hat Enterprise Linux ES version 4 php-4.3.9-3.22.4, php-4.3.9-3.22.4.i386, php-4.3.9-3.22.4.ia64 +39
- Red Hat Enterprise Linux WS version 3 php-4.3.2-40.ent, php-4.3.2-40.ent.i386, php-4.3.2-40.ent.ia64 +18
- Red Hat Enterprise Linux WS version 4 php-4.3.9-3.22.4, php-4.3.9-3.22.4.i386, php-4.3.9-3.22.4.ia64 +39
Fixes 7 records
Priority MEDIUM 58
Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unserialize function, which triggers the overflow in the ZVAL reference counter.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.40895 · Published 2007-03-06 · Fixed
Priority MEDIUM 51
The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.1883 · Published 2007-03-06 · Fixed CWE-674
Priority MEDIUM 47
Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a cra…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.12257 · Published 2007-01-30 · Partial fix CWE-120
Priority MEDIUM 44
CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote attackers to inject arbitrary e-mail headers and possibly conduct spam attacks via a control character im…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.06948 · Published 2007-03-28 · Fixed
Priority MEDIUM 41
Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbitrary code by overwriting variables pointing to (1) the GLOBALS array or (2) the session data in _SES…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.07734 · Published 2007-03-27 · Fixed
Priority MEDIUM 41
Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary co…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.08438 · Published 2007-04-06 · Fixed CWE-189
Priority LOW 38
The mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal register_globals flag and does not disable it in certain cases when a script terminates, which allows remote attackers to inv…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.05444 · Published 2007-03-21 · Fixed
THREATIST.IORead the docs