34 matches found
openSUSE 10 Security Update : apache2-mod_php5 (apache2-mod_php5-6068)
php 5.1.9 fixes among other things some security issues : - Missing bounds checks of an error in the imageRotate function of the gd extension potentially allowed attackers to read portions of memory CVE-2008-5498. - the mbstring.funcoverload in .htaccess was applied to other virtual hosts on th...
PHP 5.x < 5.2.9 Multiple Vulnerabilities
Binary data 4943.prm...
PHP < 5.2.9 Multiple Vulnerabilities
According to its banner, the version of PHP installed on the remote host is older than 5.2.9. Such versions may be affected by several security issues : - Background color is not correctly validated with a non true color image in function 'imagerotate'. CVE-2008-5498 - A denial of service conditi...
Mandrake Security Advisory MDVSA-2009:021 (php)
The remote host is missing an update to php announced via advisory MDVSA-2009:021. OpenVAS Vulnerability Test $Id: mdksa2009021.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:021 php Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
PHP <= 5.2.8 gd library - imageRotate() Information Leak Vulnerability
No description provided by source. PHP - gd library - imageRotatefunction Information Leak Vulnerability Discovered by: Hamid Ebadi, Further research and exploit: Mohammad R. Roohian CSIRT Team Members Amirkabir University APA Laboratory Introduction PHP is a popular web programming language whic...
PHP <= 5.2.8 gd library - imageRotate() Information Leak Vulnerability
Exploit for multiple platform in category local exploits ====================================================================== PHP = 5.2.8 gd library - imageRotate Information Leak Vulnerability ====================================================================== PHP - gd library -...
PHP 5.2.8 gd library - imageRotate() Information Leak
PHP 5.2.8 gd library - imageRotate Information Leak PHP - gd library - imageRotatefunction Information Leak Vulnerability Discovered by: Hamid Ebadi, Further research and exploit: Mohammad R. Roohian CSIRT Team Members Amirkabir University APA Laboratory Introduction PHP is a popular web...
PHP 5.x < 5.2.9 Memory Information Disclosure Vulnerability
PHP is prone to a memory information disclosure vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php";...
PHP imageRotate()未初始化内存信息泄露漏洞
BUGTRAQ ID: 33002 CVECAN ID: CVE-2008-5498 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的imageRotate函数中存在数组索引错误，允许远程攻击者通过向索引的图片提交特制的bgdcolor或clrBack 参数值读取任意内存位置的内容。 PHP 5.2.8 厂商补丁： PHP --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.php.net ?php / edi = src esi = clrBack -205923 for...
Memory corruption
Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary memory locations via a crafted value of the third argument aka the bgdcolor or clrBack argument for an indexed image...
CVE-2008-5498
Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary memory locations via a crafted value of the third argument aka the bgdcolor or clrBack argument for an indexed image...
CVE-2008-5498
Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary memory locations via a crafted value of the third argument aka the bgdcolor or clrBack argument for an indexed image...
CVE-2008-5498
Array index error in the imageRotate function in PHP 5.2.8 and earlier allows context-dependent attackers to read the contents of arbitrary memory locations via a crafted value of the third argument aka the bgdcolor or clrBack argument for an indexed image...
CVE-2008-5498
CVE-2008-5498 is an array index error in PHP’s imageRotate function within the gd extension (PHP 5.2.8 and earlier). This allows context-dependent attackers to read portions of memory when the third argument (bgd_color/clrBack) is crafted for indexed images. The issue is reported across multiple ...