Vulnerabilities > PHP > PHP > 4.0.0

DATE CVE VULNERABILITY TITLE RISK
2007-04-06 CVE-2007-1001 Numeric Errors vulnerability in PHP
Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allow context-dependent attackers to execute arbitrary code via Wireless Bitmap (WBMP) images with large width or height values.
network
php CWE-189
6.8
6.8
2007-04-03 CVE-2007-1835 Unspecified vulnerability in PHP
PHP 4 before 4.4.5 and PHP 5 before 5.2.1, when using an empty session save path (session.save_path), uses the TMPDIR default after checking the restrictions, which allows local users to bypass open_basedir restrictions.
local
low complexity
php
4.6
4.6
2007-04-02 CVE-2007-1825 Buffer Overflow vulnerability in PHP Imap_Mail_Compose() Function
Buffer overflow in the imap_mail_compose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5, allows remote attackers to execute arbitrary code via a long boundary string in a type.parameters field.
network
low complexity
php
7.5
7.5
2007-03-30 CVE-2007-1777 Integer Overflow vulnerability in PHP Zip_Entry_Read()
Integer overflow in the zip_read_entry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code via a ZIP archive that contains an entry with a length value of 0xffffffff, which is incremented before use in an emalloc call, triggering a heap overflow.
network
low complexity
php
7.5
7.5
2007-03-28 CVE-2007-1718 Unspecified vulnerability in PHP
CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote attackers to inject arbitrary e-mail headers and possibly conduct spam attacks via a control character immediately following folding of the (1) Subject or (2) To parameter, as demonstrated by a parameter containing a "\r\n\t\n" sequence, related to an increment bug in the SKIP_LONG_HEADER_SEP macro.
network
low complexity
php
7.8
7.8
2007-03-28 CVE-2007-1717 Unspecified vulnerability in PHP
The mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 truncates e-mail messages at the first ASCIIZ ('\0') byte, which might allow context-dependent attackers to prevent intended information from being delivered in e-mail messages.
network
low complexity
php
5.0
5.0
2007-03-27 CVE-2007-1701 Deserialization of Untrusted Data vulnerability in PHP
PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to execute arbitrary code via deserialization of session data, which overwrites arbitrary global variables, as demonstrated by calling session_decode on a string beginning with "_SESSION|s:39:".
network
php CWE-502
6.8
6.8
2007-03-27 CVE-2007-1700 Unspecified vulnerability in PHP
The session extension in PHP 4 before 4.4.5, and PHP 5 before 5.2.1, calculates the reference count for the session variables without considering the internal pointer from the session globals, which allows context-dependent attackers to execute arbitrary code via a crafted string in the session_register after unsetting HTTP_SESSION_VARS and _SESSION, which destroys the session data Hashtable.
network
low complexity
php
7.5
7.5
2007-03-21 CVE-2007-1583 Unspecified vulnerability in PHP
The mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal register_globals flag and does not disable it in certain cases when a script terminates, which allows remote attackers to invoke available PHP scripts with register_globals functionality that is not detectable by these scripts, as demonstrated by forcing a memory_limit violation.
network
php
6.8
6.8
2007-03-21 CVE-2007-1582 Unspecified vulnerability in PHP
The resource system in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent attackers to execute arbitrary code by interrupting certain functions in the GD (ext/gd) extension and unspecified other extensions via a userspace error handler, which can be used to destroy and modify internal resources.
network
php
6.8
6.8