Vulnerabilities > PHP > PHP > 4.4.8

DATE CVE VULNERABILITY TITLE RISK
2007-09-04 CVE-2007-3996 Numeric Errors vulnerability in PHP
Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large (1) srcW or (2) srcH value to the (a) gdImageCopyResized function, or a large (3) sy (height) or (4) sx (width) value to the (b) gdImageCreate or the (c) gdImageCreateTrueColor function.
network
php CWE-189
6.8
6.8
2007-08-29 CVE-2007-4586 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in PHP
Multiple buffer overflows in php_iisfunc.dll in the iisfunc extension for PHP 5.2.0 and earlier allow context-dependent attackers to execute arbitrary code, probably during Unicode conversion, as demonstrated by a long string in the first argument to the iis_getservicestate function, related to the ServiceId argument to the (1) fnStartService, (2) fnGetServiceState, (3) fnStopService, and possibly other functions.
network
low complexity
php CWE-119
7.5
7.5
2007-08-21 CVE-2007-4441 Local Buffer Overflow vulnerability in PHP Win32std Extension
Buffer overflow in php_win32std.dll in the win32std extension for PHP 5.2.0 and earlier allows context-dependent attackers to execute arbitrary code via a long string in the filename argument to the win_browse_file function.
local
low complexity
php
4.6
4.6
2007-05-17 CVE-2007-2748 Information Exposure vulnerability in PHP
The substr_count function in PHP 5.2.1 and earlier allows context-dependent attackers to obtain sensitive information via unspecified vectors, a different affected function than CVE-2007-1375.
network
php CWE-200
4.3
4.3
2007-03-20 CVE-2007-1521 Unspecified vulnerability in PHP
Double free vulnerability in PHP before 4.4.7, and 5.x before 5.2.2, allows context-dependent attackers to execute arbitrary code by interrupting the session_regenerate_id function, as demonstrated by calling a userspace error handler or triggering a memory limit violation.
network
php
6.8
6.8
2007-03-12 CVE-2007-1413 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in PHP
Buffer overflow in the snmpget function in the snmp extension in PHP 5.2.3 and earlier, including PHP 4.4.6 and probably other PHP 4 versions, allows context-dependent attackers to execute arbitrary code via a long value in the third argument (object id).
network
low complexity
php CWE-119
7.5
7.5
2007-03-10 CVE-2007-1375 Integer Overflow vulnerability in PHP 5 Substr_Compare
Integer overflow in the substr_compare function in PHP 5.2.1 and earlier allows context-dependent attackers to read sensitive memory via a large value in the length argument, a different vulnerability than CVE-2006-1991.
network
low complexity
php
5.0
5.0
2007-02-13 CVE-2007-0910 Multiple vulnerability in PHP 5.2.0 and Prior Versions
Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors.
network
low complexity
php trustix
critical
 10.0
10
2006-11-04 CVE-2006-5706 Local Security vulnerability in PHP
Unspecified vulnerabilities in PHP, probably before 5.2.0, allow local users to bypass open_basedir restrictions and perform unspecified actions via unspecified vectors involving the (1) chdir and (2) tempnam functions.
local
low complexity
php
7.2
7.2
2006-11-04 CVE-2006-5465 Buffer Overflow vulnerability in PHP HTMLEntities HTMLSpecialChars
Buffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted UTF-8 inputs to the (1) htmlentities or (2) htmlspecialchars functions.
network
low complexity
php
7.5
7.5