Vulnerabilities > PHP > PHP > 4.1.3

DATE CVE VULNERABILITY TITLE RISK
2007-03-16 CVE-2007-1484 Unspecified vulnerability in PHP
The array_user_key_compare function in PHP 4.4.6 and earlier, and 5.x up to 5.2.1, makes erroneous calls to zval_dtor, which triggers memory corruption and allows local users to bypass safe_mode and execute arbitrary code via a certain unset operation after array_user_key_compare has been called.
local
low complexity
php
4.6
4.6
2007-03-16 CVE-2007-1475 Remote Buffer Overflow vulnerability in PHP Interbase Extension
Multiple buffer overflows in the (1) ibase_connect and (2) ibase_pconnect functions in the interbase extension in PHP 4.4.6 and earlier allow context-dependent attackers to execute arbitrary code via a long argument.
php
5.4
5.4
2007-03-14 CVE-2007-1461 Permissions, Privileges, and Access Controls vulnerability in PHP
The compress.bzip2:// URL wrapper provided by the bz2 extension in PHP before 4.4.7, and 5.x before 5.2.2, does not implement safemode or open_basedir checks, which allows remote attackers to read bzip2 archives located outside of the intended directories.
network
low complexity
php CWE-264
7.8
7.8
2007-03-14 CVE-2007-1460 Permissions, Privileges, and Access Controls vulnerability in PHP
The zip:// URL wrapper provided by the PECL zip extension in PHP before 4.4.7, and 5.2.0 and 5.2.1, does not implement safemode or open_basedir checks, which allows remote attackers to read ZIP archives located outside of the intended directories.
network
low complexity
php CWE-264
5.0
5.0
2007-03-12 CVE-2007-1413 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in PHP
Buffer overflow in the snmpget function in the snmp extension in PHP 5.2.3 and earlier, including PHP 4.4.6 and probably other PHP 4 versions, allows context-dependent attackers to execute arbitrary code via a long value in the third argument (object id).
network
low complexity
php CWE-119
7.5
7.5
2007-03-10 CVE-2007-1411 Local Buffer Overflow vulnerability in PHP MSSQL_Connect
Buffer overflow in PHP 4.4.6 and earlier, and unspecified PHP 5 versions, allows local and possibly remote attackers to execute arbitrary code via long server name arguments to the (1) mssql_connect and (2) mssql_pconnect functions.
network
php
6.8
6.8
2007-03-10 CVE-2007-1375 Integer Overflow vulnerability in PHP 5 Substr_Compare
Integer overflow in the substr_compare function in PHP 5.2.1 and earlier allows context-dependent attackers to read sensitive memory via a large value in the length argument, a different vulnerability than CVE-2006-1991.
network
low complexity
php
5.0
5.0
2007-03-06 CVE-2007-1286 Integer Overflow vulnerability in PHP ZVAL Reference Counter
Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unserialize function, which triggers the overflow in the ZVAL reference counter.
network
php
6.8
6.8
2007-03-06 CVE-2007-1285 Uncontrolled Recursion vulnerability in multiple products
The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable destruction routines.
network
low complexity
php canonical novell suse redhat CWE-674
7.5
7.5
2007-02-20 CVE-2007-0988 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products
The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attackers to cause a denial of service (infinite loop) by unserializing certain integer expressions, which only cause 32-bit arguments to be used after the check for a negative value, as demonstrated by an "a:2147483649:{" argument. 		4.3
4.3