CVE-2007-2878

The VFAT compat ioctls in the Linux kernel before 2.6.21.2, when run on a 64-bit system, allow local users to corrupt a kerneldirent struct and cause a denial of service system crash via unknown vectors...

Design/Logic Flaw

VMware Workstation before 5.5.4, when running a 64-bit Windows guest on a 64-bit host, allows local users to "corrupt the virtual machine's register context" by debugging a local program and stepping into a "syscall instruction."...

CVE-2007-1876

VMware Workstation before 5.5.4, when running a 64-bit Windows guest on a 64-bit host, allows local users to "corrupt the virtual machine's register context" by debugging a local program and stepping into a "syscall instruction."...

CVE-2007-1876

CVE-2007-1876 affects VMware Workstation prior to 5.5.4. In a 64-bit Windows guest on a 64-bit host, debugging a local program and stepping into a syscall instruction could corrupt the virtual machine’s register context, leading to system instability or VM/process failures. The issue is described...

shadow security update

CentOS Errata and Security Advisory CESA-2007:0276 Updated shadow-utils packages that fix a security issue and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The shadow-utils package includes the necessary programs f...

RHEL 4 : cpio (RHSA-2007:0245)

An updated cpio package that fixes a security issue and various bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GNU cpio copies files into or out of a cpio or tar archive. A buffer overflow was found in cpio on 64-bit platform...

RHEL 4 : shadow-utils (RHSA-2007:0276)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2007:0276 advisory. The shadow-utils package includes the necessary programs for converting UNIX password files to the shadow password format, as well as programs for...

Low: Red Hat Security Advisory: shadow-utils security and bug fix update

Updated shadow-utils packages that fix a security issue and various bugs are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The shadow-utils package includes the necessary programs for converting UNIX password files to the shadow...

Low: Red Hat Security Advisory: w3c-libwww security and bug fix update

Updated w3c-libwww packages that fix a security issue and a bug are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. w3c-libwww is a general-purpose web library. Several buffer overflow flaws in w3c-libwww were found. If a client...

Low: Red Hat Security Advisory: cpio security and bug fix update

An updated cpio package that fixes a security issue and various bugs is now available. This update has been rated as having low security impact by the Red Hat Security Response Team. GNU cpio copies files into or out of a cpio or tar archive. A buffer overflow was found in cpio on 64-bit platform...

Integer overflow

Multiple integer signedness errors in the printf function family in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 on 64 bit machines allow context-dependent attackers to execute arbitrary code via 1 certain negative argument numbers that arise in the phpformattedprint function because of 64 to 32 bit...

CVE-2007-1884

Multiple integer signedness errors in the printf function family in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 on 64 bit machines allow context-dependent attackers to execute arbitrary code via 1 certain negative argument numbers that arise in the phpformattedprint function because of 64 to 32 bit...

PHP printf() integer overflow

Integer overflow on 64-bit systems...

PHP zend_hash_init function infinite loop

Infinite loop on 64-bit platforms...

MOPB-05-2007:PHP unserialize() 64 bit Array Creation Denial of Service Vulnerability

Summary A user supplied serialized string might trigger on 64 bit systems a tight endless loop within zendhashinit exhausting CPU ressources. Affected versions Affected is PHP 4.4.4/5.2.0 and below. Detailed information Before PHP 4.3.11 was released it was discovered that there is a problem in t...

Mandrake Linux Security Advisory : php (MDKSA-2007:048)

A number of vulnerabilities were discovered in PHP language. Many buffer overflow flaws were discovered in the PHP session extension, the strreplace function, and the imapmailcompose function. An attacker able to use a PHP application using any of these functions could trigger these flaws and...

security flaw

The zendhashinit function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attackers to cause a denial of service infinite loop by unserializing certain integer expressions, which only cause 32-bit arguments to be used after the check for a...

Design/Logic Flaw

The zendhashinit function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attackers to cause a denial of service infinite loop by unserializing certain integer expressions, which only cause 32-bit arguments to be used after the check for a...

CVE-2007-0988

The zendhashinit function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attackers to cause a denial of service infinite loop by unserializing certain integer expressions, which only cause 32-bit arguments to be used after the check for a...

CVE-2007-0988

CVE-2007-0988 affects PHP 5 before 5.2.1 and PHP 4 before 4.4.5 on 64-bit platforms. The vulnerability occurs in zend_hash_init during unserialization of certain integer expressions, causing the script to use 32-bit arguments after a negative value check and potentially enter an infinite loop, le...