5 matches found
CVE-2007-1777
Integer overflow in the zipreadentry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code via a ZIP archive that contains an entry with a length value of 0xffffffff, which is incremented before use in an emalloc call, triggering a heap overflow...
CVE-2007-1777
Integer overflow in the zipreadentry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code via a ZIP archive that contains an entry with a length value of 0xffffffff, which is incremented before use in an emalloc call, triggering a heap overflow...
Integer overflow
Integer overflow in the zipreadentry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code via a ZIP archive that contains an entry with a length value of 0xffffffff, which is incremented before use in an emalloc call, triggering a heap overflow...
CVE-2007-1777
Integer overflow in the zipreadentry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code via a ZIP archive that contains an entry with a length value of 0xffffffff, which is incremented before use in an emalloc call, triggering a heap overflow...
CVE-2007-1777
CVE-2007-1777: Integer overflow in PHP 4 before 4.4.5 in zip_read_entry allows remote code execution via a ZIP entry with length 0xffffffff, triggering a heap overflow. Affected: PHP 4.x prior to 4.4.5. Impact is remote code execution risk through crafted archives; vendor patch is to upgrade to P...