PHP 5.4.0 Beta2
Approved changes feed: RSS · Atom
cpe:2.3:a:php:php:5.4.0:beta2:*:*:*:*:*:*
part: a version: 5.4.0 update: beta2
| Vendor | Php (9aec2613-7a27-5ce5-8ac7-140851d8da4c) |
|---|---|
| Product | Php (38640b93-5029-5cca-a025-ab7d01c98b51) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/php/php-src |
purl2cpe | 2026-06-01 10:17:42.460769 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2014-5120 |
vulnerable | 2026-06-08 05:05:47.003399 |
Details available
gd_ctx.c in the GD component in PHP 5.4.x before 5.4.32 and 5.5.x before 5.5.16 does not ensure that pathnames lack %00 sequences, which might allow remote attackers to overwrite arbitrary files via crafted input to an application that calls the (1) imagegd, (2) imagegd2, (3) imagegif, (4) imagejpeg, (5) imagepng, (6) imagewbmp, or (7) imagewebp function.
Published: 2014-08-23T01:00:00.000Z
Updated: 2024-08-06T11:34:37.424Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3597 |
vulnerable | 2026-06-08 05:05:33.673144 |
Details available
Multiple buffer overflows in the php_parserr function in ext/standard/dns.c in PHP before 5.4.32 and 5.5.x before 5.5.16 allow remote DNS servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted DNS record, related to the dns_get_record function and the dn_expand function. NOTE: this issue exists because of an incomplete fix for CVE-2014-4049.
Published: 2014-08-23T01:00:00.000Z
Updated: 2024-08-06T10:50:17.419Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-3587 |
vulnerable | 2026-06-08 05:05:33.621019 |
Details available
Integer overflow in the cdf_read_property_info function in cdf.c in file through 5.19, as used in the Fileinfo component in PHP before 5.4.32 and 5.5.x before 5.5.16, allows remote attackers to cause a denial of service (application crash) via a crafted CDF file. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1571.
Published: 2014-08-23T01:00:00.000Z
Updated: 2024-08-06T10:50:17.834Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2336 |
vulnerable | 2026-06-08 05:02:03.709281 |
Details available
sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to cause a denial of service (resource consumption) by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'T' case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.
Published: 2012-05-11T10:00:00.000Z
Updated: 2024-08-06T19:34:23.585Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2311 |
vulnerable | 2026-06-08 05:02:03.375394 |
Details available
sapi/cgi/cgi_main.c in PHP before 5.3.13 and 5.4.x before 5.4.3, when configured as a CGI script (aka php-cgi), does not properly handle query strings that contain a %3D sequence but no = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case. NOTE: this vulnerability exists because of an incomplete fix for CVE-2012-1823.
Published: 2012-05-11T10:00:00.000Z
Updated: 2024-08-06T19:26:09.031Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4566 |
vulnerable | 2026-06-08 04:59:31.910041 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.