929 matches found
CVE-2010-4697
CVE-2010-4697 is a use-after-free vulnerability in the Zend engine of PHP, affecting PHP versions before 5.2.15 and 5.3.x before 5.3.4. The issue arises from how __set, __get, __isset, and __unset can be used on objects accessed by a reference, enabling heap memory corruption and potential denial...
CVE-2010-4697
Use-after-free vulnerability in the Zend engine in PHP before 5.2.15 and 5.3.x before 5.3.4 might allow context-dependent attackers to cause a denial of service heap memory corruption or have unspecified other impact via vectors related to use of set, get, isset, and unset methods on objects...
CVE-2010-4697
Use-after-free vulnerability in the Zend engine in PHP before 5.2.15 and 5.3.x before 5.3.4 might allow context-dependent attackers to cause a denial of service heap memory corruption or have unspecified other impact via vectors related to use of set, get, isset, and unset methods on objects...
PHP 5.2.x < 5.2.15 Multiple Vulnerabilities
Binary data 5733.prm...
PHP 5.2.x < 5.2.15 Multiple Vulnerabilities
Binary data 801097.prm...
Mandriva Linux Security Advisory : php (MDVSA-2010:239)
A possible double free flaw was found in the imap extension for php CVE-2010-4150. A GC corrupting flaw was found in Zend/zendgc.c for php-5.3.x that under certain circumstances could cause a segmention fault crash. Packages for 2009.0 are provided as of the Extended Maintenance Program. Please...
Zend Studio函数描述脚本注入漏洞
Zend Studio是Zend Technologies开发的PHP语言集成开发环境。 Zend Studio没有对PHP函数的描述进行转义或htmlencode编码便在tooltip对话框中显示，用户受骗打开了特制的PHP文件并通过 tooltip显示了恶意函数描述就会导致注入并执行恶意代码。 Zend Studio 7.2.0 厂商补丁： Zend ---- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.zend.com/downloads ?php / scriptnew...
Zend Studio Cross Zone Command Execution
Author: www.80vul.com Email: [email protected] Release Date: 2010/7/10 References: http://80vul.com/Zend%20studio/Zend%20studio%20location%20Cross.htm Zend Studio is a commercial, proprietary integrated development environment IDE for PHP developed by Zend Technologies, based on the PHP...
HBCMS(Hongbo)1.8.3 list_resource. php blind injection vulnerability-vulnerability warning-the black bar safety net
Affected versions: HBCMSmacro-Bo=1.8.3 Vulnerability description: HBCMS is the domestic more well-known PHP content management system, not yet open source, the source code using the zend encryption. Meet the following three conditions, you can through the MySQL blind injection to get any sensitiv...
CVE-2010-2191
The 1 parsestr, 2 pregmatch, 3 unpack, and 4 pack functions; the 5 ZENDFETCHRW, 6 ZENDCONCAT, and 7 ZENDASSIGNCONCAT opcodes; and the 8 ArrayObject::uasort method in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allow context-dependent attackers to obtain sensitive information memory contents or...
Fedora Update for php-ZendFramework FEDORA-2010-8498
Check for the Version of php-ZendFramework OpenVAS Vulnerability Test Fedora Update for php-ZendFramework FEDORA-2010-8498 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
[SECURITY] Fedora 13 Update: php-ZendFramework-1.10.4-1.fc13
Extending the art & spirit of PHP, Zend Framework is based on simplicity, object-oriented best practices, corporate friendly licensing, and a rigorou sly tested agile codebase. Zend Framework is focused on building more secure, reliable, and modern Web 2.0 applications & web services, and consumi...
[SECURITY] Fedora 12 Update: php-ZendFramework-1.10.4-1.fc12
Extending the art & spirit of PHP, Zend Framework is based on simplicity, object-oriented best practices, corporate friendly licensing, and a rigorou sly tested agile codebase. Zend Framework is focused on building more secure, reliable, and modern Web 2.0 applications & web services, and consumi...
[SECURITY] Fedora 11 Update: php-ZendFramework-1.10.4-1.fc11
Extending the art & spirit of PHP, Zend Framework is based on simplicity, object-oriented best practices, corporate friendly licensing, and a rigorou sly tested agile codebase. Zend Framework is focused on building more secure, reliable, and modern Web 2.0 applications & web services, and consumi...
CVE-2010-1914
The Zend Engine in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information by interrupting the handler for the 1 ZENDBWXOR opcode shiftleftfunction, 2 ZENDSL opcode bitwisexorfunction, or 3 ZENDSR opcode shiftrightfunction, related to the...
Code injection
The Zend Engine in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information by interrupting the handler for the 1 ZENDBWXOR opcode shiftleftfunction, 2 ZENDSL opcode bitwisexorfunction, or 3 ZENDSR opcode shiftrightfunction, related to the...
CVE-2010-1914
The Zend Engine in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information by interrupting the handler for the 1 ZENDBWXOR opcode shiftleftfunction, 2 ZENDSL opcode bitwisexorfunction, or 3 ZENDSR opcode shiftrightfunction, related to the...
CVE-2010-1914
The Zend Engine in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 allows context-dependent attackers to obtain sensitive information by interrupting the handler for the 1 ZENDBWXOR opcode shiftleftfunction, 2 ZENDSL opcode bitwisexorfunction, or 3 ZENDSR opcode shiftrightfunction, related to the...
CVE-2010-1914
CVE-2010-1914 affects PHP’s Zend Engine: PHP 5.2 (up to 5.2.13) and 5.3 (up to 5.3.2) are impacted. The vulnerability arises from interruptions of the XEND opcode parser for ZEND_BW_XOR, ZEND_SL, and ZEND_SR (in relation to convert_to_long_base), which can allow a context-dependent attacker to ob...
Month of PHP Security - Summary - 1st May - 10th May
Hi everyone, 10 days ago the Month of PHP Security 2010 has started at http://www.php-security.org/ and meanwhile 20 vulnerabilities were posted and also 4 user submitted articles were published. Here is a short summary of what was released so far. You can follow the Month of PHP Security on...