Vulnerabilities > PHP > PHP > 3.0.5

DATE CVE VULNERABILITY TITLE RISK
2007-03-10 CVE-2007-1379 Unspecified vulnerability in PHP
The ovrimos_close function in the Ovrimos extension for PHP before 4.4.5 can trigger efree of an arbitrary address, which might allow context-dependent attackers to execute arbitrary code.
network
high complexity
php
5.1
2007-03-10 CVE-2007-1378 Unspecified vulnerability in PHP
The ovrimos_longreadlen function in the Ovrimos extension for PHP before 4.4.5 allows context-dependent attackers to write to arbitrary memory locations via the result_id and length arguments.
network
high complexity
php
5.1
2007-03-10 CVE-2007-1375 Integer Overflow vulnerability in PHP 5 Substr_Compare
Integer overflow in the substr_compare function in PHP 5.2.1 and earlier allows context-dependent attackers to read sensitive memory via a large value in the length argument, a different vulnerability than CVE-2006-1991.
network
low complexity
php
5.0
2007-03-06 CVE-2007-1286 Integer Overflow vulnerability in PHP ZVAL Reference Counter
Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unserialize function, which triggers the overflow in the ZVAL reference counter.
network
php
6.8
2007-02-13 CVE-2007-0910 Multiple vulnerability in PHP 5.2.0 and Prior Versions
Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors.
network
low complexity
php trustix
critical
10.0
2007-02-13 CVE-2007-0909 Multiple vulnerability in PHP 5.2.0 and Prior Versions
Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to (1) all of the *print functions on 64-bit systems, and (2) the odbc_result_all function.
network
low complexity
php trustix
7.5
2007-02-13 CVE-2007-0907 Multiple vulnerability in PHP 5.2.0 and Prior Versions
Buffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via unspecified vectors involving the sapi_header_op function.
network
low complexity
php trustix
5.0
2007-02-13 CVE-2007-0906 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products
Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors in the (1) session, (2) zip, (3) imap, and (4) sqlite extensions; (5) stream filters; and the (6) str_replace, (7) mail, (8) ibase_delete_user, (9) ibase_add_user, and (10) ibase_modify_user functions.
network
low complexity
php trustix CWE-119
7.5
2007-02-13 CVE-2007-0905 Multiple vulnerability in PHP 5.2.0 and Prior Versions
PHP before 5.2.1 allows attackers to bypass safe_mode and open_basedir restrictions via unspecified vectors in the session extension.
network
low complexity
php trustix
7.5
2006-11-04 CVE-2006-5706 Local Security vulnerability in PHP
Unspecified vulnerabilities in PHP, probably before 5.2.0, allow local users to bypass open_basedir restrictions and perform unspecified actions via unspecified vectors involving the (1) chdir and (2) tempnam functions.
local
low complexity
php
7.2