php-pear vulnerabilities (Red Hat)
204 vulnerabilities.
php-pearRed HatPHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context...6.8 Mediumphp-pearRed HatThe mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal...6.8 Mediumphp-pearRed HatThe php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before...5.0 Mediumphp-pearRed HatInteger overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute...6.8 Mediumphp-pearRed HatThe Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a...7.5 Highphp-pearRed HatThe zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64...4.3 Mediumphp-pearRed HatUnspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global...10.0 Highphp-pearRed HatMultiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute...7.5 Highphp-pearRed HatThe WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not...5.0 Mediumphp-pearRed HatBuffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via...5.0 Mediumphp-pearRed HatMultiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and...7.5 Highphp-pearRed HatBuffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and...7.5 Highphp-pearRed HatBuffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted...7.5 Highphp-pearRed HatInteger overflow in memory allocation routines in PHP before 5.1.6, when running on a 64-bit...2.6 Lowphp-pearRed HatBuffer overflow in the LWZReadByte_ function in ext/gd/libgd/gd_gif_in.c in the GD extension in...2.6 Lowphp-pearRed HatMultiple heap-based buffer overflows in the (1) str_repeat and (2) wordwrap functions in ext...9.3 Highphp-pearRed Hatscanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to...4.6 Mediumphp-pearRed Hatzend_hash_del_key_or_index in zend_hash.c in PHP before 4.4.3 and 5.x before 5.1.3 can cause...9.3 Highphp-pearRed HatUnspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors,...9.3 Highphp-pearRed HatInteger overflow in the wordwrap function in string.c in PHP 4.4.2 and 5.1.2 might allow context...5.0 Mediumphp-pearRed HatDirectory traversal vulnerability in file.c in PHP 4.4.2 and 5.1.2 allows local users to bypass...2.6 Lowphp-pearRed HatCross-site scripting (XSS) vulnerability in phpinfo (info.c) in PHP 5.1.2 and 4.4.2 allows remote...4.3 Mediumphp-pearRed HatPHP before 5.1.3-RC1 might allow remote attackers to obtain portions of memory via crafted binary...5.0 Mediumphp-pearRed HatMultiple cross-site scripting (XSS) vulnerabilities in PHP 4.4.1 and 5.1.1, when display_errors...2.6 Lowphp-pearRed HatCRLF injection vulnerability in the mb_send_mail function in PHP before 5.1.0 might allow remote...5.0 Mediumphp-pearRed HatThe exif_read_data function in the Exif module in PHP before 4.4.1 allows remote attackers to...5.0 Mediumphp-pearRed HatThe RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals...7.5 Highphp-pearRed HatThe parse_str function in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when called with only one...5.0 Mediumphp-pearRed HatCross-site scripting (XSS) vulnerability in the phpinfo function in PHP 4.x up to 4.4.0 and 5.x...4.3 Mediumphp-pearRed HatBuffer overflow in the mail_valid_net_parse_work function in mail.c for Washington's IMAP Server ...7.5 Highphp-pearRed HatEval injection vulnerability in PHPXMLRPC 1.1.1 and earlier (PEAR XML-RPC for PHP), as used in...7.5 Highphp-pearRed HatEval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc) and...7.5 Highphp-pearRed HatRace condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files...3.7 Lowphp-pearRed Hatexif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory...5.0 Mediumphp-pearRed HatInteger overflow in the exif_process_IFD_TAG function in exif.c in PHP before 4.3.11 may allow...7.5 Highphp-pearRed HatThe php_next_marker function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by...5.0 Mediumphp-pearRed HatThe php_handle_iff function in image.c for PHP 4.2.2, 4.3.9, 4.3.10 and 5.0.3, as reachable by...5.0 Mediumphp-pearRed HatPHP 4.0 with cURL functions allows remote attackers to bypass the open_basedir setting and read...5.0 Mediumphp-pearRed HatBuffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2...10.0 Highphp-pearRed HatThe deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to...10.0 Highphp-pearRed HatMultiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode...10.0 Highphp-pearRed HatBuffer overflow in the imap_fetch_overview function in the IMAP functionality (php_imap.c) in PHP...5.0 Medium