php-gd vulnerabilities (Red Hat)
314 vulnerabilities.
php-gdRed HatThe (1) htmlentities and (2) htmlspecialchars functions in PHP before 5.2.5 accept partial...6.4 Mediumphp-gdRed HatPHP before 5.2.3 allows context-dependent attackers to cause a denial of service (application...5.0 Mediumphp-gdRed HatUnspecified vulnerability in PHP before 5.2.4 has unknown impact and attack vectors, related to...5.0 Mediumphp-gdRed HatThe chunk_split function in string.c in PHP 5.2.3 does not properly calculate the needed buffer...7.5 Highphp-gdRed HatThe zend_alter_ini_entry function in PHP before 5.2.4 does not properly handle an interruption to...7.5 Highphp-gdRed HatThe money_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i...7.5 Highphp-gdRed HatThe wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the...5.0 Mediumphp-gdRed HatMultiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial...6.8 Mediumphp-gdRed HatThe session_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows...4.3 Mediumphp-gdRed HatMultiple integer overflows in the chunk_split function in PHP 5 before 5.2.3 and PHP 4 before 4.4...6.8 Mediumphp-gdRed HatThe gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of...4.3 Mediumphp-gdRed HatBuffer overflow in the make_http_soap_request function in PHP before 5.2.2 has unknown impact and...5.1 Mediumphp-gdRed HatCRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2...2.6 Lowphp-gdRed HatBuffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has...7.5 Highphp-gdRed HatMultiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD...6.8 Mediumphp-gdRed HatBuffer overflow in the imap_mail_compose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5,...7.5 Highphp-gdRed HatCRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5...7.8 Highphp-gdRed HatDouble free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent...6.8 Mediumphp-gdRed HatPHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context...6.8 Mediumphp-gdRed HatThe mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal...6.8 Mediumphp-gdRed HatThe php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before...5.0 Mediumphp-gdRed HatInteger overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute...6.8 Mediumphp-gdRed HatThe Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a...7.5 Highphp-gdRed HatThe zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64...4.3 Mediumphp-gdRed HatUnspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global...10.0 Highphp-gdRed HatMultiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute...7.5 Highphp-gdRed HatThe WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not...5.0 Mediumphp-gdRed HatBuffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via...5.0 Mediumphp-gdRed HatMultiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and...7.5 Highphp-gdRed HatBuffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and...7.5 Highphp-gdRed HatBuffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted...7.5 Highphp-gdRed HatInteger overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to execute...10.0 Highphp-gdRed HatInteger overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit...2.6 Lowphp-gdRed HatThe stripos function in PHP before 5.1.5 has unknown impact and attack vectors related to an out...10.0 Highphp-gdRed HatBuffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in...2.6 Lowphp-gdRed HatMultiple heap-based buffer overflows in the (1) str_repeat and (2) wordwrap functions in ext...9.3 Highphp-gdRed Hatscanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to...4.6 Mediumphp-gdRed Hatzend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause...9.3 Highphp-gdRed HatUnspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors,...9.3 Highphp-gdRed HatInteger overflow in the wordwrap function in string.c in PHP 4.4.2 and 5.1.2 might allow context...5.0 Mediumphp-gdRed HatDirectory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass...2.6 Lowphp-gdRed HatCross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote...4.3 Mediumphp-gdRed HatPHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary...5.0 Mediumphp-gdRed HatMultiple cross-site scripting (XSS) vulnerabilities in PHP 4.4.1 and 5.1.1, when display_errors...2.6 Lowphp-gdRed HatCRLF injection vulnerability in the mb_send_mail function in PHP before 5.1.0 might allow remote...5.0 Mediumphp-gdRed HatThe exif_read_data function in the Exif module in PHP before 4.4.1 allows remote attackers to...5.0 Mediumphp-gdRed HatThe RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals...7.5 Highphp-gdRed HatThe parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one...5.0 Mediumphp-gdRed HatCross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x...4.3 Mediumphp-gdRed HatBuffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server ...7.5 High- Show moreLoading…