MOPB-27-2007: PHP ext/gd Already Freed Resource Access Vulnerability A malicious error handler can trick the GD extension into accessing an already freed image resource which allows read and write access to arbitrary memory addresses from PHP code. This can lead to arbitrary code execution.
BONUS-12-2007: mod_security POST Rules Bypass Vulnerability An ASCIIZ character embedded in application/x-www-form-urlencoded POST data terminates the data in the eyes of mod_security, which results in a trivial way to bypass its rules.
MOPB-04-2007: PHP 4 unserialize() ZVAL Reference Counter Overflow During unserialisation of user supplied data that contains a lot of references to a variable the internal 16bit zval reference counter can overflow. This leads to an exploitable double dtor condition.
PHP-Sicherheit, RDF-News-Reader by Alexander Palm, v1.93 (01.07.2006)
Errata, Advisories, Tips und Howtos zu PHP-Sicherheit
vom 05.02.2012 / 13:42:42, seit 0 Minute(n) / Refresh alle 15 Minuten