SUSE CVE-2007-2727

The mcryptcreateiv function in ext/mcrypt/mcrypt.c in PHP before 4.4.7, 5.2.1, and possibly 5.0.x and other PHP 5 versions, calls phprandr with an uninitialized seed variable and therefore always generates the same initialization vector IV, which might allow context-dependent attackers to decrypt...

PT-2014-6443

Name of the Vulnerable Software and Affected Versions HHVM versions prior to 3.3.0 Description The issue concerns the mcrypt create iv function in HHVM, which does not properly seed the random number generator. This oversight makes it easier for remote attackers to defeat cryptographic protection...