PHP — популярный язык сценариев общего назначения, особенно подходящий для веб-разработки.

The ovrimos_close function in the Ovrimos extension for PHP before 4.4.5 can trigger efree of an arbitrary address, which might allow context-dependent attackers to execute arbitrary code.

The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that their arguments correspond to a shmop resource, which allows context-dependent attackers to read and write arbitrary memory locations via arguments associated with an inappropriate resource, as demonstrated by a GD Image resource.

Integer overflow in the 16 bit variable reference counter in PHP 4 allows context-dependent attackers to execute arbitrary code by overflowing this counter, which causes the same variable to be destroyed twice, a related issue to CVE-2007-1286.

The php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before 5.2.1, allows context-dependent attackers to obtain sensitive information (memory contents) via a serialized variable entry with a large length value, which triggers a buffer over-read.

The wddx_deserialize function in wddx.c 1.119.2.10.2.12 and 1.119.2.10 ...

The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x s ...

The ovrimos_longreadlen function in the Ovrimos extension for PHP befo ...

The ovrimos_close function in the Ovrimos extension for PHP before 4.4 ...

Integer overflow in the substr_compare function in PHP 5.2.1 and earli ...

The php_binary serialization handler in the session extension in PHP b ...