Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket.

Stack-based buffer overflow in the socket_connect function in ext/sockets/sockets.c in PHP 5.3.3 through 5.3.6 might allow context-dependent attackers to execute arbitrary code via a long pathname for a UNIX socket.

php: buffer over-read in Exif extension php: use-after-free vulnerability in substr_replace() php: Crash by converting serial day numbers (SDN) into Julian calendar php: Multiple memory leaks in the OpenSSL extension php: DoS when using HTTP proxy with the FTP wrapper php: DoS (excessive CPU consumption) by processing certain Zip archive files php: stack-based buffer overflow in socket_connect() php: file path injection vulnerability in RFC1867 file upload filename crypt_blowfish: 8-bit character mishandling allows different password pairs to produce the same hash