PHP vulnerabilities

Releases

• Ubuntu 4.10

Details

Stefan Esser reported several buffer overflows in PHP’s variable unserializing
handling. These could allow an attacker to execute arbitrary code on the server
with the PHP interpreter’s privileges by sending specially crafted input
strings (form data, cookie values, and similar).

Additionally, Ilia Alshanetsky discovered a buffer overflow in the
exif_read_data() function. Attackers could execute arbitrary code on the server
by sending a JPEG image with a very long “sectionname” value to PHP
applications that support image uploads.