CVE-2007-1376

The record

The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that their arguments correspond to a shmop resource, which allows context-dependent attackers to read and write arbitrary memory locations via arguments associated with an inappropriate resource, as demonstrated by a GD Image resource.

Affected packages

Related vulnerabilities

• CVE-2009-4017 PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files… Also affects php5
• CVE-2007-3806 The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of… Also affects php5
• CVE-2007-1777 Integer overflow in the zip_read_entry function in PHP 4 before 4.4.5 allows remote… Also affects php5
• CVE-2007-1399 Stack-based buffer overflow in the zip:// URL wrapper in PECL ZIP 1.8.3 and earlier, as… Also affects php5
• CVE-2007-1286 Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to… Also affects php5
• CVE-2012-0830 The php_register_variable_ex function in php_variables.c in PHP 5.3.9 allows remote… Also affects php5
• CVE-2011-4885 PHP before 5.3.9 computes hash values for form parameters without restricting the ability… Also affects php5
• CVE-2011-2202 The rfc1867_post_handler function in main/rfc1867.c in PHP before 5.3.7 does not properly… Also affects php5