Vulnerabilities > PHP > PHP > 4.4.3

DATE CVE VULNERABILITY TITLE RISK
2007-03-10 CVE-2007-1411 Local Buffer Overflow vulnerability in PHP MSSQL_Connect
Buffer overflow in PHP 4.4.6 and earlier, and unspecified PHP 5 versions, allows local and possibly remote attackers to execute arbitrary code via long server name arguments to the (1) mssql_connect and (2) mssql_pconnect functions.
network
php
6.8
6.8
2007-03-10 CVE-2007-1396 Unspecified vulnerability in PHP
The import_request_variables function in PHP 4.0.7 through 4.4.6, and 5.x before 5.2.2, when called without a prefix, does not prevent the (1) GET, (2) POST, (3) COOKIE, (4) FILES, (5) SERVER, (6) SESSION, and other superglobals from being overwritten, which allows remote attackers to spoof source IP address and Referer data, and have other unspecified impact.
network
php
6.8
6.8
2007-03-10 CVE-2007-1380 Unspecified vulnerability in PHP
The php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before 5.2.1, allows context-dependent attackers to obtain sensitive information (memory contents) via a serialized variable entry with a large length value, which triggers a buffer over-read.
network
low complexity
php
5.0
5.0
2007-03-10 CVE-2007-1379 Unspecified vulnerability in PHP
The ovrimos_close function in the Ovrimos extension for PHP before 4.4.5 can trigger efree of an arbitrary address, which might allow context-dependent attackers to execute arbitrary code.
network
high complexity
php
5.1
5.1
2007-03-10 CVE-2007-1378 Unspecified vulnerability in PHP
The ovrimos_longreadlen function in the Ovrimos extension for PHP before 4.4.5 allows context-dependent attackers to write to arbitrary memory locations via the result_id and length arguments.
network
high complexity
php
5.1
5.1
2007-03-10 CVE-2007-1376 Unspecified vulnerability in PHP
The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that their arguments correspond to a shmop resource, which allows context-dependent attackers to read and write arbitrary memory locations via arguments associated with an inappropriate resource, as demonstrated by a GD Image resource.
network
low complexity
php
7.5
7.5
2007-03-10 CVE-2007-1375 Integer Overflow vulnerability in PHP 5 Substr_Compare
Integer overflow in the substr_compare function in PHP 5.2.1 and earlier allows context-dependent attackers to read sensitive memory via a large value in the length argument, a different vulnerability than CVE-2006-1991.
network
low complexity
php
5.0
5.0
2007-03-06 CVE-2007-1286 Integer Overflow vulnerability in PHP ZVAL Reference Counter
Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unserialize function, which triggers the overflow in the ZVAL reference counter.
network
php
6.8
6.8
2007-03-06 CVE-2007-1285 Uncontrolled Recursion vulnerability in multiple products
The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable destruction routines.
network
low complexity
php canonical novell suse redhat CWE-674
7.5
7.5
2007-02-20 CVE-2007-0988 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products
The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attackers to cause a denial of service (infinite loop) by unserializing certain integer expressions, which only cause 32-bit arguments to be used after the check for a negative value, as demonstrated by an "a:2147483649:{" argument. 		4.3
4.3