已在 PHP (Web 指令碼語言) 中發現了數個弱點。Common Vulnerabilities and Exposures 專案發現下列問題：

- CVE-2011-1072 據發現，未安全處理 PEAR 安裝程式中的暫存檔可能會導致拒絕服務。

- CVE-2011-4153 Maksymilian Arciemowicz 發現，zend_strndup() 函式中的 NULL 指標解除參照可能會導致拒絕服務。

- CVE-2012-0781 Maksymilian Arciemowicz 發現，tidy_diagnose() 函式中的 NULL 指標解除參照可能會導致拒絕服務。

- CVE-2012-0788 據發現，處理 PDORow 物件時缺少檢查，可能會導致拒絕服務。

- CVE-2012-0831 據發現，magic_quotes_gpc 設定可從遠端停用。

此更新也可解決在 Debian 中未被視為安全性問題 (請參閱 README.Debian.security)，但仍已修正的 PHP 錯誤：CVE-2010-4697、CVE-2011-1092、CVE-2011-1148、CVE-2011-1464、CVE-2011-1467、CVE-2011-1468、CVE-2011-1469、CVE-2011-1470、CVE-2011-1657、CVE-2011-3182、CVE-2011-3267

此 PHP5 更新可修正下列安全性問題：

- ZIP 延伸模組和 NumberFormatter 中的輸入驗證。(CWE-20、CVE-2011-0421 / CVE-2011-1470 / CVE-2011-1467)

- SHM 支援和 ZIP 延伸模組中的數值錯誤。
 (CWE-189、CVE-2011-1092 / CVE-2011-1471)

- AF_UNIX support、字串處理、資料流支援中的緩衝區溢位。(CWE-119、CVE-2011-1938 / CVE-2011-1464 / CVE-2011-1469)

- 字串處理中的資源管理錯誤 (在釋放後使用)。(CWE-399、CVE-2011-1148)

- OpenSSL 延伸模組中的記憶體洩漏 (CVE-2011-1468)

Versions of PHP 5.3 earlier than 5.3.6 are potentially affected by multiple vulnerabilities : 

 - An error exists in the function '_zip_name_locate()' in the file 'ext/zip/lib/zip_name_locate.c' which allows a NULL pointer to be dereferenced when processing an empty archive. (CVE-2011-0421)
 - A variable casting error exists in the Exif extension's C function 'exif_process_IFD_TAG()' in the file 'ext/exif/exif.c' could allow arbitrary code execution. (CVE-2011-0708)
 - An integer overflow vulnerability exists in the implementation of the PHP function 'shmop_read' in the file 'ext/shmop/shmop.c'. (CVE-2011-1092)
 - An error exists in the file 'phar/phar_object.c' n which calls to 'zend_throw_exception_ex()' pass data as a string format parameter which could lead to information disclosure or memory corruption when handling PHP archives. (CVE-2011-1153)
 - A buffer overflow error exists in the C function 'xbuf_format_converter' in the file 'main/snprintf.c' when the PHP configuration setting for 'precision' is set to a large value. (Bug 54055)
 - An unspecified error exists in the security enforcement regarding the parsing of the fastcgi protocol with the 'FastCGI Process Manager' (FPM) SAPI.

Versions of PHP 5.3 earlier than 5.3.6 are potentially affected by multiple vulnerabilities : 

  - An error exists in the function '_zip_name_locate()' in the file 'ext/zip/lib/zip_name_locate.c' which allows a NULL pointer to be dereferenced when processing an empty archive. (CVE-2011-0421)

  - A variable casting error exists in the Exif extension's C function 'exif_process_IFD_TAG()' in the file 'ext/exif/exif.c' could allow arbitrary code execution. (CVE-2011-0708)

  - An integer overflow vulnerability exists in the implementation of the PHP function 'shmop_read' in the file 'ext/shmop/shmop.c'. (CVE-2011-1092)

  - An error exists in the file 'phar/phar_object.c' n which calls to 'zend_throw_exception_ex()' pass data as a string format parameter which could lead to information disclosure or memory corruption when handling PHP archives. (CVE-2011-1153)

  - A buffer overflow error exists in the C function 'xbuf_format_converter' in the file 'main/snprintf.c' when the PHP configuration setting for 'precision' is set to a large value. (Bug 54055)

  - An unspecified error exists in the security enforcement regarding the parsing of the fastcgi protocol with the 'FastCGI Process Manager' (FPM) SAPI.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
57925	Debian DSA-2408-1 : php5 - 數個弱點	Nessus	Debian Local Security Checks	2012/2/14	2021/1/11	high
57158	SuSE 10 安全性更新：PHP5 (ZYPP 修補程式編號 7553)	Nessus	SuSE Local Security Checks	2011/12/13	2021/1/19	high
5824	PHP 5.3.x < 5.3.6 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	2011/3/18	2019/3/6	high
801082	PHP 5.3 < 5.3.6 String To Double Conversion DoS	Log Correlation Engine	Web Servers	2011/3/18		high

检测

插件搜索

high

high

high

high