Approved changes feed: RSS · Atom

cpe:2.3:a:php:php:5.2.4:*:windows:*:*:*:*:*

part: a version: 5.2.4 update: *

VendorPhp (9aec2613-7a27-5ce5-8ac7-140851d8da4c)
ProductPhp (38640b93-5029-5cca-a025-ab7d01c98b51)
Editionwindows
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/php/php-src purl2cpe 2026-06-01 10:17:42.460592

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-1470 vulnerable 2026-06-08 04:57:59.343891 Details available
The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a ziparchive stream that is not properly handled by the stream_get_contents function.
Published: 2011-03-20T01:00:00.000Z
Updated: 2024-08-06T22:28:41.493Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1469 vulnerable 2026-06-08 04:57:59.340920 Details available
Unspecified vulnerability in the Streams component in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) by accessing an ftp:// URL during use of an HTTP proxy with the FTP wrapper.
Published: 2011-03-20T01:00:00.000Z
Updated: 2024-08-06T22:28:41.600Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1468 vulnerable 2026-06-08 04:57:59.337868 Details available
Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of service (memory consumption) via (1) plaintext data to the openssl_encrypt function or (2) ciphertext data to the openssl_decrypt function.
Published: 2011-03-20T01:00:00.000Z
Updated: 2024-08-06T22:28:41.435Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1467 vulnerable 2026-06-08 04:57:59.334706 Details available
Unspecified vulnerability in the NumberFormatter::setSymbol (aka numfmt_set_symbol) function in the Intl extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via an invalid argument, a related issue to CVE-2010-4409.
Published: 2011-03-20T01:00:00.000Z
Updated: 2024-08-06T22:28:41.353Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1466 vulnerable 2026-06-08 04:57:59.330932 Details available
Integer overflow in the SdnToJulian function in the Calendar extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a large integer in the first argument to the cal_from_jd function.
Published: 2011-03-20T01:00:00.000Z
Updated: 2024-08-06T22:28:41.750Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1464 vulnerable 2026-06-08 04:57:59.327317 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-1092 vulnerable 2026-06-08 04:57:55.651319 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0755 vulnerable 2026-06-08 04:56:39.570938 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0708 vulnerable 2026-06-08 04:56:38.743787 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-0421 vulnerable 2026-06-08 04:56:37.025472 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-4699 vulnerable 2026-06-08 04:56:30.328440 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4418 vulnerable 2026-06-08 04:51:48.485977 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1272 vulnerable 2026-06-08 04:51:14.262732 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1271 vulnerable 2026-06-08 04:51:14.260364 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-7243 vulnerable 2026-06-08 04:49:30.834156 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.