Vulnerabilities > CVE-2007-1001 - Numeric Errors vulnerability in PHP
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap (WBMP) images with large width or height values.
Vulnerable Configurations
Common Weakness Enumeration (CWE)
Exploit-Db
| description | PHP 5.2.1 GD Extension WBMP File Integer Overflow Vulnerabilities. CVE-2007-1001 . Dos exploit for php platform |
| id | EDB-ID:29823 |
| last seen | 2016-02-03 |
| modified | 2007-04-07 |
| published | 2007-04-07 |
| reporter | Ivan Fratric |
| source | https://www.exploit-db.com/download/29823/ |
| title | PHP <= 5.2.1 GD Extension WBMP File Integer Overflow Vulnerabilities |
Nessus
NASL family CentOS Local Security Checks NASL id CENTOS_RHSA-2007-0153.NASL description Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A flaw was found in the way the mbstring extension set global variables. A script which used the mb_parse_str() function to set global variables could be forced to enable the register_globals configuration option, possibly resulting in global variable injection. (CVE-2007-1583) A heap based buffer overflow flaw was discovered in PHP last seen 2020-06-01 modified 2020-06-02 plugin id 25095 published 2007-04-30 reporter This script is Copyright (C) 2007-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/25095 title CentOS 5 : php (CESA-2007:0153) NASL family CentOS Local Security Checks NASL id CENTOS_RHSA-2007-0155.NASL description Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A denial of service flaw was found in the way PHP processed a deeply nested array. A remote attacker could cause the PHP interpreter to crash by submitting an input variable with a deeply nested array. (CVE-2007-1285) A flaw was found in the way PHP last seen 2020-06-01 modified 2020-06-02 plugin id 25043 published 2007-04-19 reporter This script is Copyright (C) 2007-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/25043 title CentOS 3 / 4 : php (CESA-2007:0155) NASL family CGI abuses NASL id PHP_5_2_2.NASL description According to its banner, the version of PHP 5.x installed on the remote host is older than 5.2.2. It is, therefore, affected by multiple vulnerabilities: - A heap-based buffer overflow vulnerability was found in PHP last seen 2020-06-01 modified 2020-06-02 plugin id 17797 published 2012-01-11 reporter This script is Copyright (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/17797 title PHP 5.x < 5.2.2 Multiple vulnerabilities NASL family SuSE Local Security Checks NASL id SUSE_APACHE2-MOD_PHP5-3289.NASL description This Update fixes numerous vulnerabilities in PHP. Most of them were made public during the last seen 2020-06-01 modified 2020-06-02 plugin id 27150 published 2007-10-17 reporter This script is Copyright (C) 2007-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/27150 title openSUSE 10 Security Update : apache2-mod_php5 (apache2-mod_php5-3289) NASL family Fedora Local Security Checks NASL id FEDORA_2007-455.NASL description This update fixes a number of security issues in PHP. A denial of service flaw was found in the way PHP processed a deeply nested array. A remote attacker could cause the PHP interpreter to crash by submitting an input variable with a deeply nested array. (CVE-2007-1285) A flaw was found in the way the mbstring extension set global variables. A script which used the mb_parse_str() function to set global variables could be forced to enable the register_globals configuration option, possibly resulting in global variable injection. (CVE-2007-1583) A flaw was discovered in the way PHP last seen 2020-06-01 modified 2020-06-02 plugin id 25101 published 2007-04-30 reporter This script is Copyright (C) 2007-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/25101 title Fedora Core 5 : php-5.1.6-1.5 (2007-455) NASL family Gentoo Local Security Checks NASL id GENTOO_GLSA-200705-19.NASL description The remote host is affected by the vulnerability described in GLSA-200705-19 (PHP: Multiple vulnerabilities) Several vulnerabilities were found in PHP, most of them during the Month Of PHP Bugs (MOPB) by Stefan Esser. The most severe of these vulnerabilities are integer overflows in wbmp.c from the GD library (CVE-2007-1001) and in the substr_compare() PHP 5 function (CVE-2007-1375). Ilia Alshanetsky also reported a buffer overflow in the make_http_soap_request() and in the user_filter_factory_create() functions (CVE-2007-2510, CVE-2007-2511), and Stanislav Malyshev discovered another buffer overflow in the bundled XMLRPC library (CVE-2007-1864). Additionally, the session_regenerate_id() and the array_user_key_compare() functions contain a double-free vulnerability (CVE-2007-1484, CVE-2007-1521). Finally, there exist implementation errors in the Zend engine, in the mb_parse_str(), the unserialize() and the mail() functions and other elements. Impact : Remote attackers might be able to exploit these issues in PHP applications making use of the affected functions, potentially resulting in the execution of arbitrary code, Denial of Service, execution of scripted contents in the context of the affected site, security bypass or information leak. Workaround : There is no known workaround at this time. last seen 2020-06-01 modified 2020-06-02 plugin id 25340 published 2007-05-29 reporter This script is Copyright (C) 2007-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/25340 title GLSA-200705-19 : PHP: Multiple vulnerabilities NASL family Mandriva Local Security Checks NASL id MANDRAKE_MDKSA-2007-089.NASL description A heap-based buffer overflow vulnerability was found in PHP last seen 2020-06-01 modified 2020-06-02 plugin id 25113 published 2007-04-30 reporter This script is Copyright (C) 2007-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/25113 title Mandrake Linux Security Advisory : php (MDKSA-2007:089) NASL family Slackware Local Security Checks NASL id SLACKWARE_SSA_2007-127-01.NASL description New php packages are available for Slackware 10.2, 11.0, and -current to improve the stability and security of PHP. Quite a few bugs were fixed -- please see http://www.php.net for a detailed list. All sites that use PHP are encouraged to upgrade. Please note that we haven last seen 2020-06-01 modified 2020-06-02 plugin id 25174 published 2007-05-10 reporter This script is Copyright (C) 2007-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/25174 title Slackware 10.2 / 11.0 / current : php (SSA:2007-127-01) NASL family SuSE Local Security Checks NASL id SUSE_APACHE2-MOD_PHP5-3290.NASL description This Update fixes numerous vulnerabilities in PHP. Most of them were made public during the last seen 2020-06-01 modified 2020-06-02 plugin id 29378 published 2007-12-13 reporter This script is Copyright (C) 2007-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/29378 title SuSE 10 Security Update : PHP5 (ZYPP Patch Number 3290) NASL family CGI abuses NASL id PHP_4_4_7_OR_5_2_2.NASL description According to its banner, the version of PHP installed on the remote host is older than 4.4.7 / 5.2.2. Such versions may be affected by several issues, including buffer overflows in the GD library. last seen 2020-06-01 modified 2020-06-02 plugin id 25159 published 2007-05-04 reporter This script is Copyright (C) 2007-2018 Westpoint Limited. source https://www.tenable.com/plugins/nessus/25159 title PHP < 4.4.7 / 5.2.2 Multiple Vulnerabilities NASL family Mandriva Local Security Checks NASL id MANDRAKE_MDKSA-2007-090.NASL description A heap-based buffer overflow vulnerability was found in PHP last seen 2020-06-01 modified 2020-06-02 plugin id 37164 published 2009-04-23 reporter This script is Copyright (C) 2009-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/37164 title Mandrake Linux Security Advisory : php (MDKSA-2007:090) NASL family Oracle Linux Local Security Checks NASL id ORACLELINUX_ELSA-2007-0155.NASL description From Red Hat Security Advisory 2007:0155 : Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A denial of service flaw was found in the way PHP processed a deeply nested array. A remote attacker could cause the PHP interpreter to crash by submitting an input variable with a deeply nested array. (CVE-2007-1285) A flaw was found in the way PHP last seen 2020-06-01 modified 2020-06-02 plugin id 67471 published 2013-07-12 reporter This script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/67471 title Oracle Linux 3 / 4 : php (ELSA-2007-0155) NASL family MacOS X Local Security Checks NASL id MACOSX_SECUPD2007-007.NASL description The remote host is running a version of Mac OS X 10.4 or 10.3 which does not have the security update 2007-007 applied. This update contains several security fixes for the following programs : - bzip2 - CFNetwork - CoreAudio - cscope - gnuzip - iChat - Kerberos - mDNSResponder - PDFKit - PHP - Quartz Composer - Samba - SquirrelMail - Tomcat - WebCore - WebKit last seen 2020-06-01 modified 2020-06-02 plugin id 25830 published 2007-08-02 reporter This script is Copyright (C) 2007-2018 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/25830 title Mac OS X Multiple Vulnerabilities (Security Update 2007-007) NASL family Red Hat Local Security Checks NASL id REDHAT-RHSA-2007-0153.NASL description Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A flaw was found in the way the mbstring extension set global variables. A script which used the mb_parse_str() function to set global variables could be forced to enable the register_globals configuration option, possibly resulting in global variable injection. (CVE-2007-1583) A heap based buffer overflow flaw was discovered in PHP last seen 2020-06-01 modified 2020-06-02 plugin id 25325 published 2007-05-25 reporter This script is Copyright (C) 2007-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/25325 title RHEL 5 : php (RHSA-2007:0153) NASL family Fedora Local Security Checks NASL id FEDORA_2007-415.NASL description This update fixes a number of security issues in PHP. A denial of service flaw was found in the way PHP processed a deeply nested array. A remote attacker could cause the PHP interpreter to crash by submitting an input variable with a deeply nested array. (CVE-2007-1285) A flaw was found in the way the mbstring extension set global variables. A script which used the mb_parse_str() function to set global variables could be forced to enable the register_globals configuration option, possibly resulting in global variable injection. (CVE-2007-1583) A flaw was discovered in the way PHP last seen 2020-06-01 modified 2020-06-02 plugin id 25046 published 2007-04-19 reporter This script is Copyright (C) 2007-2019 Tenable Network Security, Inc. source https://www.tenable.com/plugins/nessus/25046 title Fedora Core 6 : php-5.1.6-3.5.fc6 (2007-415) NASL family Red Hat Local Security Checks NASL id REDHAT-RHSA-2007-0155.NASL description Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A denial of service flaw was found in the way PHP processed a deeply nested array. A remote attacker could cause the PHP interpreter to crash by submitting an input variable with a deeply nested array. (CVE-2007-1285) A flaw was found in the way PHP last seen 2020-06-01 modified 2020-06-02 plugin id 25068 published 2007-04-19 reporter This script is Copyright (C) 2007-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/25068 title RHEL 3 / 4 : php (RHSA-2007:0155) NASL family F5 Networks Local Security Checks NASL id F5_BIGIP_SOL7859.NASL description The remote BIG-IP device is missing a patch required by a security advisory. last seen 2020-06-01 modified 2020-06-02 plugin id 78215 published 2014-10-10 reporter This script is Copyright (C) 2014-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/78215 title F5 Networks BIG-IP : Multiple PHP vulnerabilities (SOL7859) NASL family FreeBSD Local Security Checks NASL id FREEBSD_PKG_F5E52BF5FC7711DB8163000E0C2E438A.NASL description The PHP development team reports : Security Enhancements and Fixes in PHP 5.2.2 and PHP 4.4.7 : - Fixed CVE-2007-1001, GD wbmp used with invalid image size - Fixed asciiz byte truncation inside mail() - Fixed a bug in mb_parse_str() that can be used to activate register_globals - Fixed unallocated memory access/double free in in array_user_key_compare() - Fixed a double free inside session_regenerate_id() - Added missing open_basedir & safe_mode checks to zip:// and bzip:// wrappers. - Limit nesting level of input variables with max_input_nesting_level as fix for. - Fixed CRLF injection inside ftp_putcmd(). - Fixed a possible super-global overwrite inside import_request_variables(). - Fixed a remotely trigger-able buffer overflow inside bundled libxmlrpc library. Security Enhancements and Fixes in PHP 5.2.2 only : - Fixed a header injection via Subject and To parameters to the mail() function - Fixed wrong length calculation in unserialize S type. - Fixed substr_compare and substr_count information leak. - Fixed a remotely trigger-able buffer overflow inside make_http_soap_request(). - Fixed a buffer overflow inside user_filter_factory_create(). Security Enhancements and Fixes in PHP 4.4.7 only : - XSS in phpinfo() last seen 2020-06-01 modified 2020-06-02 plugin id 25207 published 2007-05-11 reporter This script is Copyright (C) 2007-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/25207 title FreeBSD : php -- multiple vulnerabilities (f5e52bf5-fc77-11db-8163-000e0c2e438a)
Oval
| accepted | 2013-04-29T04:02:49.319-04:00 | ||||||||||||||||||||||||||||||||
| class | vulnerability | ||||||||||||||||||||||||||||||||
| contributors |
| ||||||||||||||||||||||||||||||||
| definition_extensions |
| ||||||||||||||||||||||||||||||||
| description | Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap (WBMP) images with large width or height values. | ||||||||||||||||||||||||||||||||
| family | unix | ||||||||||||||||||||||||||||||||
| id | oval:org.mitre.oval:def:10179 | ||||||||||||||||||||||||||||||||
| status | accepted | ||||||||||||||||||||||||||||||||
| submitted | 2010-07-09T03:56:16-04:00 | ||||||||||||||||||||||||||||||||
| title | Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap (WBMP) images with large width or height values. | ||||||||||||||||||||||||||||||||
| version | 27 |
Redhat
| advisories |
| ||||||||||||
| rpms |
|
Seebug
| bulletinFamily | exploit |
| description | CVE(CAN) ID: CVE-2004-0996,CVE-2004-2541,CVE-2005-0758,CVE-2005-3128,CVE-2006-2842,CVE-2006-3174,CVE-2006-4019,CVE-2006-6142,CVE-2007-0450,CVE-2007-0478,CVE-2007-1001,CVE-2007-1262,CVE-2007-1358,CVE-2007-1460,CVE-2007-1461,CVE-2007-1484,CVE-2007-1521,CVE-2007-1583,CVE-2007-1711,CVE-2007-1717,CVE-2007-1860,CVE-2007-2403,CVE-2007-2404,CVE-2007-2405,CVE-2007-2406,CVE-2007-2407,CVE-2007-2408,CVE-2007-2409,CVE-2007-2410,CVE-2007-2442,CVE-2007-2443,CVE-2007-2446,CVE-2007-2447,CVE-2007-2589,CVE-2007-2798,CVE-2007-3742,CVE-2007-3744,CVE-2007-3745,CVE-2007-3746,CVE-2007-3747,CVE-2007-3748,CVE-2007-3944 Mac OS X是苹果家族计算机所使用的操作系统。 Apple 2007-007安全更新修复了Mac OS X中的多个安全漏洞，远程或本地攻击者可能利用这些漏洞造成多种威胁。 具体条目包括： * CVE-2005-0758 bzgrep在处理畸形文件名时存在漏洞，攻击者通过诱使用户bzgrep恶意文件执行任意指令。 * CVE-2007-2403 Mac OS X在处理FTP URI时存在漏洞，攻击者可以诱使用户处理恶意FTP URI的用户在当前FTP会话中执行任意命令。 * CVE-2007-2404 CFNetwork处理HTTP回应数据时易受数据分割攻击的影响，可能导致跨站脚本执行。 * CVE-2007-3745 CoreAudio的Java接口允许释放任意的内存地址，远程攻击者可能利用此漏洞通过诱使用户访问一个恶意网页控制用户系统。 * CVE-2007-3746 CoreAudio的Java接口存在堆块边界访问漏洞，远程攻击者可能利用此漏洞通过诱使用户访问一个恶意网页控制用户系统。 * CVE-2007-3747 CoreAudio的Java接口允许在堆块以外的内存初始化或操作对象，远程攻击者可能利用此漏洞通过诱使用户访问一个恶意网页控制用户系统。 * CVE-2004-0996,CVE-2004-2541 Cscope存在多个漏洞，包括缓冲区溢出和不安全的方式创建临时文件，可能导致远程攻击者控制系统。 * CVE-2005-0758 zgrep在处理畸形文件名时存在漏洞，攻击者通过诱使用户zgrep恶意文件执行任意指令。 * CVE-2007-3748 iChat使用的UPnP IGD代码实现上存在缓冲区溢出漏洞，本地网络上的远程攻击者可能利用此漏洞导致拒绝服务或执行任意指令。 * CVE-2007-2442,CVE-2007-2443,CVE-2007-2798 MIT Kerberos kadmind实现上存在多个漏洞，攻击者可能利用这些漏洞导致拒绝服务或执行任意指认。 * CVE-2007-3744 mDNSResponder使用的UPnP IGD代码实现上存在缓冲区溢出漏洞，本地网络上的远程攻击者可能利用此漏洞导致拒绝服务或执行任意指令。 * CVE-2007-2405 Preview处理PDF文件的实现上存在整数溢出漏洞，攻击者可能利用此漏洞诱使用户处理恶意PDF文件控制用户系统。 * CVE-2007-1001,CVE-2007-1287,CVE-2007-1460,CVE-2007-1461,CVE-2007-1484,CVE-2007-1521,CVE-2007-1583,CVE-2007-1711,CVE-2007-1717 PHP的实现上存在多个漏洞，可能导致各种攻击。 * CVE-2007-2406 Quartz Composer实现上存在未初始化对象指针处理漏洞，攻击者可能诱使用户处理恶意文件控制用户系统。 * CVE-2007-2446 Samba的实现在处理畸形的RPC请求时存在堆缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 * CVE-2007-2447 Samba的实现在处理畸形RPC请求时存在命令注入漏洞，远程攻击者可能利用此漏洞在服务器上执行任意命令。 * CVE-2007-2407 Samba的实现没有正确地处理权限的丢弃，导致磁盘限额绕过。 * CVE-2005-3128,CVE-2006-2842,CVE-2006-3174,CVE-2006-4019,CVE-2006-6142,CVE-2007-1262,CVE-2007-2589 SquirrelMail的实现上存在多个漏洞，可能导致跨站脚本执行。 * CVE-2005-2090,CVE-2007-0450,CVE-2007-1358,CVE-2007-1860 Tomcat实现上存在多个漏洞，可能导致跨站脚本执行和信息泄露。 * CVE-2007-2408 WebCore软件包实现上存在漏洞，可能导致不期望的Java applet执行。 * CVE-2007-0478 WebCore软件包在处理HTML标题的代码上存在漏洞，允许远程用户插入代码。 * CVE-2007-2409,CVE-2007-2410 WebCore软件包的实现上存在漏洞，可能导致浏览器信息泄露。 * CVE-2007-3742 WebKit软件包实现上存在漏洞，可能导致域名欺骗。 * CVE-2007-3944 Safari的JavaScript引擎使用的PCRE库实现上存在堆溢出漏洞，远程攻击者可能利用此漏洞通过诱使用户访问恶意网页控制用户系统。 Apple MacOS X 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： <a href="http://docs.info.apple.com/article.html?artnum=306172" target="_blank">http://docs.info.apple.com/article.html?artnum=306172</a> |
| id | SSV:2062 |
| last seen | 2017-11-19 |
| modified | 2007-08-02 |
| published | 2007-08-02 |
| reporter | Root |
| title | Mac OS X 2007-007更新修复多个安全漏洞 |
Statements
| contributor | Mark J Cox |
| lastmodified | 2008-02-14 |
| organization | Red Hat |
| statement | This issue was fixed in php package updates for Red Hat Enterprise Linux and Red Hat Application Stack: http://rhn.redhat.com/cve/CVE-2007-1001.html This issue did not affect the versions of gd as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5. |
References
- http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/wbmp.c?r1=1.2.4.1&r2=1.2.4.1.8.1
- http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/wbmp.c?r1=1.2.4.1&r2=1.2.4.1.8.1
- http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/wbmp.c?revision=1.2.4.1.8.1&view=markup
- http://cvs.php.net/viewvc.cgi/php-src/ext/gd/libgd/wbmp.c?revision=1.2.4.1.8.1&view=markup
- http://docs.info.apple.com/article.html?artnum=306172
- http://docs.info.apple.com/article.html?artnum=306172
- http://ifsec.blogspot.com/2007/04/php-521-wbmp-file-handling-integer.html
- http://ifsec.blogspot.com/2007/04/php-521-wbmp-file-handling-integer.html
- http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
- http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
- http://rhn.redhat.com/errata/RHSA-2007-0155.html
- http://rhn.redhat.com/errata/RHSA-2007-0155.html
- http://secunia.com/advisories/24814
- http://secunia.com/advisories/24814
- http://secunia.com/advisories/24909
- http://secunia.com/advisories/24909
- http://secunia.com/advisories/24924
- http://secunia.com/advisories/24924
- http://secunia.com/advisories/24945
- http://secunia.com/advisories/24945
- http://secunia.com/advisories/24965
- http://secunia.com/advisories/24965
- http://secunia.com/advisories/25056
- http://secunia.com/advisories/25056
- http://secunia.com/advisories/25151
- http://secunia.com/advisories/25151
- http://secunia.com/advisories/25445
- http://secunia.com/advisories/25445
- http://secunia.com/advisories/26235
- http://secunia.com/advisories/26235
- http://security.gentoo.org/glsa/glsa-200705-19.xml
- http://security.gentoo.org/glsa/glsa-200705-19.xml
- http://us2.php.net/releases/4_4_7.php
- http://us2.php.net/releases/4_4_7.php
- http://us2.php.net/releases/5_2_2.php
- http://us2.php.net/releases/5_2_2.php
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:087
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:087
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:088
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:088
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:089
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:089
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:090
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:090
- http://www.novell.com/linux/security/advisories/2007_32_php.html
- http://www.novell.com/linux/security/advisories/2007_32_php.html
- http://www.redhat.com/support/errata/RHSA-2007-0153.html
- http://www.redhat.com/support/errata/RHSA-2007-0153.html
- http://www.redhat.com/support/errata/RHSA-2007-0162.html
- http://www.redhat.com/support/errata/RHSA-2007-0162.html
- http://www.securityfocus.com/archive/1/464957/100/0/threaded
- http://www.securityfocus.com/archive/1/464957/100/0/threaded
- http://www.securityfocus.com/archive/1/466166/100/0/threaded
- http://www.securityfocus.com/archive/1/466166/100/0/threaded
- http://www.securityfocus.com/bid/23357
- http://www.securityfocus.com/bid/23357
- http://www.securityfocus.com/bid/25159
- http://www.securityfocus.com/bid/25159
- http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.470053
- http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.470053
- http://www.vupen.com/english/advisories/2007/1269
- http://www.vupen.com/english/advisories/2007/1269
- http://www.vupen.com/english/advisories/2007/2732
- http://www.vupen.com/english/advisories/2007/2732
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33453
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33453
- https://issues.rpath.com/browse/RPL-1268
- https://issues.rpath.com/browse/RPL-1268
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10179
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10179