|
|
| |
|
| |
php: multiple vulnerabilities
| Package(s): | mod_php php-cli php-common |
CVE #(s): | CVE-2010-4697
CVE-2010-4698
|
| Created: | February 10, 2011 |
Updated: | May 5, 2011 |
| Description: |
From the Pardus advisory:
CVE-2010-4697:
Use-after-free vulnerability in the Zend engine in PHP before 5.2.15 and
5.3.x before 5.3.4 might allow context-dependent attackers to cause a
denial of service (heap memory corruption) or have unspecified other
impact via vectors related to use of __set, __get, __isset, and __unset
methods on objects accessed by a reference.
CVE-2010-4698:
Stack-based buffer overflow in the GD extension in PHP before 5.2.15 and
5.3.x before 5.3.4 allows context-dependent attackers to cause a denial
of service (application crash) via vectors related to the iimagepstext
function and invalid anti-aliasing.
|
| Alerts: |
|
( Log in to post comments)
|
|
|