MOPS-2010-054: PHP ZEND_CONCAT/ZEND_ASSIGN_CONCAT Opcode Interruption...
PHP’s ZEND_CONCAT/ZEND_ASSIGN_CONCAT opcodes can be abused for information leakage or memory corruption by a userspace error handler interruption attack. This can be leveraged to execute arbitrary...
View ArticleMOPS-2010-055: PHP ArrayObject::uasort() Interruption Memory Corruption...
PHP’s ArrayObject::uasort() method can be interrupted and used for memory corruption attacks. Affected versions Affected is PHP 5.2 <= 5.2.13 Affected is PHP 5.3 <= 5.3.2 Credits The...
View ArticleArticle: Virtual Meta-Scripting Bytecode for PHP and JavaScript
As a last minute addition to the Month of PHP Security we present an article by Ben Fuhrmannek about virtual meta-scripting bytecode for PHP and JavaScript. Ben Fuhrmannek, 2010-05-31 Abstract Both PHP...
View ArticleMOPS-2010-056: PHP php_mysqlnd_ok_read() Information Leak Vulnerability
PHP’s php_mysqlnd_ok_read() trusts network data which can result in a heap information leak. Affected versions Affected is PHP 5.3 <= 5.3.2 Credits The vulnerability was discovered by Stefan Esser...
View ArticleMOPS-2010-057: PHP php_mysqlnd_rset_header_read() Buffer Overflow Vulnerability
PHP’s php_mysqlnd_rset_header_read() trusts network data which can result in a heap based buffer overflow. Affected versions Affected is PHP 5.3 <= 5.3.2 Credits The vulnerability was discovered by...
View ArticleMOPS-2010-058: PHP php_mysqlnd_read_error_from_line() Buffer Overflow...
PHP’s php_mysqlnd_read_error_from_line() trusts network data which can result in a heap based buffer overflow. Affected versions Affected is PHP 5.3 <= 5.3.2 Credits The vulnerability was discovered...
View ArticleMOPS-2010-059: PHP php_mysqlnd_auth_write() Stack Buffer Overflow Vulnerability
PHP’s php_mysqlnd_auth_write() does not check user supplied values which can result in a stack based buffer overflow. Affected versions Affected is PHP 5.3 <= 5.3.2 Credits The vulnerability was...
View ArticleMOPS-2010-060: PHP Session Serializer Session Data Injection Vulnerability
PHP’s default sesson serializer wrongly handles the PS_UNDEF_MARKER character Affected versions Affected is PHP 5.2 <= 5.2.13 Affected is PHP 5.3 <= 5.3.2 Credits The vulnerability was discovered...
View ArticleWinners of the Month of PHP Security
The Month of PHP Security is over and the MOPS CFP Committee has made a final decision about the ranking of the articles and tools submitted to us. And the winners are… 1000 EUR + SyScan VIP Ticket +...
View ArticleMOPS-2010-061: PHP SplObjectStorage Deserialization Use-After-Free Vulnerability
A use-after-free vulnerability was discovered in the deserialization of SPLObjectStorage objects that can be abused for leaking arbitrary memory blocks or execute arbitrary code remotely. Affected...
View Article
![Personal Investments • Re: 401k investments [which to choose?]](http://i.imgur.com/wA51OIw.png)
