PHP 'php_quot_print_encode()' function integer overflow vulnerability

PHP is an open source general-purpose computer scripting language. An integer overflow vulnerability in the PHP 'phpquotprintencode' function allows an attacker to exploit the vulnerability to execute arbitrary code in the context of a user's affected application, or a failed attack will result i...

PHP 'zend_virtual_cwd()' function null pointer reference denial of service vulnerability

PHP is an open source general-purpose computer scripting language. The PHP 'zendvirtualcwd' function null pointer reference denial of service vulnerability allows attackers to exploit the vulnerability to cause a denial of service...

Multiple Denial of Service Vulnerabilities in PHP 'ext/sqlite3/sqlite3.c'

PHP is an open source general-purpose computer scripting language. PHP 'ext/sqlite3/sqlite3.c' has multiple denial of service vulnerabilities that could be exploited by an attacker to crash an application, resulting in a denial of service...

PHP 'ext/session/session.c' Remote Command Execution Vulnerability

PHP is an open source general-purpose computer scripting language. A remote command execution vulnerability exists in PHP 'ext/session/session.c', which allows an attacker to exploit the vulnerability to execute arbitrary script code, obtain sensitive information, and a failed attempt will result...

PHP 'unserialize()' memory error references remote command execution vulnerability

PHP is an open source general-purpose computer scripting language. PHP 'unserialize' suffers from a memory error referencing a remote command execution vulnerability, which allows an attacker to exploit the vulnerability to execute arbitrary code in the context of a user's affected application,...

PHP 'ext/readline/readline.c' Denial of Service Vulnerability

PHP is an open source general-purpose computer scripting language. PHP 'ext/readline/readline.c' has a denial of service vulnerability that allows attackers to exploit the vulnerability to crash an application, causing a denial of service...

PHP 'interface.c' Denial of Service Vulnerability

PHP is an open source general-purpose computer scripting language. A denial of service vulnerability exists in PHP 'interface.c' that allows attackers to exploit the vulnerability to crash an application, resulting in a denial of service...

PHP 'php_snmp_parse_oid()' function integer overflow vulnerability

PHP is an open source general-purpose computer scripting language. An integer overflow vulnerability exists in the PHP 'phpsnmpparseoid' function. An attacker can exploit the vulnerability to execute arbitrary code in the context of an affected application...

DEBIAN-CVE-2013-7456

gdinterpolation.c in the GD Graphics Library aka libgd before 2.1.1, as used in PHP before 5.5.36, 5.6.x before 5.6.22, and 7.x before 7.0.7, allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via a crafted image that is mishandled by...

EUVD-2016-6706

splarray.c in the SPL extension in PHP before 5.5.37 and 5.6.x before 5.6.23 improperly interacts with the unserialize implementation and garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service use-after-free and application crash via crafted...

[SECURITY] Fedora 23 Update: php-5.6.24-1.fc23

PHP is an HTML-embedded scripting language. PHP attempts to make it easy for developers to write dynamically generated web pages. PHP also offers built-in database integration for several commercial and non-commercial database management systems, so writing a database-enabled webpage with PHP is...

PHP ext/session/session.c Denial of Service Vulnerability

PHP is a widely used general-purpose scripting language that is particularly well suited for web development and can be embedded in HTML. A denial of service vulnerability exists in PHP versions prior to 5.5.38, 5.6.x prior to 5.6.24, and 7.x prior to 7.0.9 in which the ext/session/session.c...

PHP exif_process_user_comment Denial of Service Vulnerability

PHP is a widely used general-purpose scripting language that is particularly well suited for web development and can be embedded in HTML. A denial of service vulnerability exists in the ext/exif/exif.c/exifprocessusercomment function in versions prior to PHP 5.5.38, 5.6.x prior to 5.6.24, and 7.x...

Vulnerability of PHP software, allowing a malicious actor to compromise the accessibility of protected information

The vulnerability in the gdImageCreateFromXpm function in gdxpm.c of the libgd library for PHP allows malicious actors to trigger a denial-of-service attack by using a specially crafted color table in the XPM file. This enables them to cause the application to abort by reassigning a null pointer...

PHP 'mcrypt_generic' function integer overflow vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. An integer overflow vulnerability exists in PHP's mcryptgeneric function, which can be exploited by an attacker to cause a heap buffer overflow...

PHP 'gdImagePaletteToTrueColor()' function integer overflow vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. An integer overflow vulnerability exists in PHP's gdImagePaletteToTrueColor function, which can be exploited by an attacker to cause a heap buff...

The vulnerability of the PHP interpreter, which allows a hacker to trigger a service failure

The vulnerability of the gdImageScaleTwoPass function in the gdinterpolation.c file in the GD Graphics Library’s PHP interpreter is related to the use of non-uniform definitions and memory release mechanisms. Exploiting this vulnerability could allow a remote attacker to trigger a service failure...

The vulnerability of the PHP interpreter allows a hacker to gain access to read files.

The vulnerability of the PHP interpreter lies in the lack of checks for the sequence “%00” in the path name. Exploiting this vulnerability allows an attacker, operating remotely, to read arbitrary files using specially crafted input data for the application that calls the function...

UBUNTU-CVE-2016-5096

Integer overflow in the fread function in ext/standard/file.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large integer in the second argument...

UBUNTU-CVE-2016-5095

Integer overflow in the phpescapehtmlentitiesex function in ext/standard/html.c in PHP before 5.5.36 and 5.6.x before 5.6.22 allows remote attackers to cause a denial of service or possibly have unspecified other impact by triggering a large output string from a FILTERSANITIZEFULLSPECIALCHARS...