PHP — популярный язык сценариев общего назначения, особенно подходящий для веб-разработки.

The php_handle_iff function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by the getimagesize PHP function, allows remote attackers to cause a denial of service (infinite loop) via a -8 size value.

Integer overflow in the exif_process_IFD_TAG function in exif.c in PHP before 4.3.11 may allow remote attackers to execute arbitrary code via an IFD tag that leads to a negative byte count.

PHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe mode on a ...

The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 ...

Multiple integer handling errors in PHP before 4.3.10 allow attackers ...

Buffer overflow in the exif_read_data function in PHP before 4.3.10 an ...

The safe mode checks in PHP 4.x to 4.3.9 and PHP 5.x to 5.0.2 truncate ...

The addslashes function in PHP 4.3.9 does not properly escape a NULL ( ...

The addslashes function in PHP 4.3.9 does not properly escape a NULL (/0) character, which may allow remote attackers to read arbitrary files in PHP applications that contain a directory traversal vulnerability in require or include statements, but are otherwise protected by the magic_quotes_gpc mechanism. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute. This candidate may change significantly in the future as a result of further discussion.

Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file.