PT-2008-5349 · Microsoft · Windows Xp +4

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 versions SP1 through SP2 Microsoft Windows Vista versions Gold through SP1 Microsoft Windows Server 2008 affected versions not specified Description: The issue is...

[Reversemode Advisory] VMware Products - GPF Denial of Service

VMWARE PRODUCTS VMWARE MEMORY MANAGER - GPF DENIAL OF SERVICE Rubйn Santamarta [email protected] 07.05.2007 Affected products: All VMware products with a hypervisor are affected + VMware WorkStation 5.5.3 and earlier + VMware Player 1.0.3 and earlier + VMware Server 1.0.2 and earlier + VMware...

MOPB-44-2007:PHP 5.2.0 Memory Manager Signed Comparision Vulnerability

Summary The new Zend Memory Manager that shipped with PHP 5.2.0 contains a comparison that wrongly casts some numbers to signed integers. Therefore a request for a very large amount of memory will be handled as a negative number and therefore result in only a minimum sized memory block being...

CVE-2007-1889

Integer signedness error in the zendmmallocint function in the Zend Memory Manager in PHP 5.2.0 allows remote attackers to execute arbitrary code via a large emalloc request, related to an incorrect signed long cast, as demonstrated via the HTTP SOAP client in PHP, and via a call to msgreceive wi...

CVE-2007-1889

Integer signedness error in the zendmmallocint function in the Zend Memory Manager in PHP 5.2.0 allows remote attackers to execute arbitrary code via a large emalloc request, related to an incorrect signed long cast, as demonstrated via the HTTP SOAP client in PHP, and via a call to msgreceive wi...

CVE-2007-1889

CVE-2007-1889 is a PHP 5.2.0 vulnerability where an Integer signedness error in the Zend Memory Manager’s _zend_mm_alloc_int can allow remote code execution via large emalloc requests. The issue stems from an incorrect signed long cast, demonstrated via the HTTP SOAP client and a msg_receive call...

MOPB-25-2007:PHP header() Space Trimming Buffer Underflow Vulnerability

Summary Since PHP 5.2.0 there is a new memory manager that allows exploiting of even one byte underflow vulnerabilities like the one described by this advisory. When an all whitespace string is passed to the header function this can result in a buffer underflow that allows code execution on atlea...

MOPB-19-2007:PHP ext/filter Space Trimming Buffer Underflow Vulnerability

Summary Since PHP 5.2.0 there is not only the new filtering extension in PHP but also a new memory manager that allows exploiting the following ext/filter vulnerability. When an all whitespace string is passed to some of the filter functions like FILTERVALIDATEINT this can result in a buffer...