|
|
| |
|
| |
php5: several vulnerabilities
| Package(s): | php5 |
CVE #(s): | CVE-2008-3658
CVE-2008-3659
CVE-2008-3660
|
| Created: | October 7, 2008 |
Updated: | June 1, 2009 |
| Description: |
From the Debian advisory:
Several vulnerabilities have been discovered in PHP, a server-side,
HTML-embedded scripting language. The Common Vulnerabilities and
Exposures project identifies the following problems:
CVE-2008-3658:
Buffer overflow in the imageloadfont function allows a denial
of service or code execution through a crafted font file.
CVE-2008-3659:
Buffer overflow in the memnstr function allows a denial of
service or code execution via a crafted delimiter parameter
to the explode function.
CVE-2008-3660:
Denial of service is possible in the FastCGI module by a
remote attacker by making a request with multiple dots
before the extension.
|
| Alerts: |
|
( Log in to post comments)
|
|
|