PHP — популярный язык сценариев общего назначения, особенно подходящий для веб-разработки.

Multiple heap-based buffer overflows in the (1) str_repeat and (2) wordwrap functions in ext/standard/string.c in PHP before 5.1.5, when used on a 64-bit system, have unspecified impact and attack vectors, a different vulnerability than CVE-2006-1990.

Integer overflow in memory allocation routines in PHP before 5.1.6, wh ...

The stripos function in PHP before 5.1.5 has unknown impact and attack ...

Multiple heap-based buffer overflows in the (1) str_repeat and (2) wor ...

The cURL extension files (1) ext/curl/interface.c and (2) ext/curl/str ...

Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in ...

The (1) file_exists and (2) imap_reopen functions in PHP before 5.1.5 ...

Buffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in PHP before 5.1.5 allows remote attackers to have an unknown impact via a GIF file with input_code_size greater than MAX_LWZ_BITS, which triggers an overflow when initializing the table array.

The (1) file_exists and (2) imap_reopen functions in PHP before 5.1.5 do not check for the safe_mode and open_basedir settings, which allows local users to bypass the settings. NOTE: the error_log function is covered by CVE-2006-3011, and the imap_open function is covered by CVE-2006-1017.

The stripos function in PHP before 5.1.5 has unknown impact and attack vectors related to an out-of-bounds read.