MOPS-2010-061: PHP SplObjectStorage Deserialization Use-After-Free Vulnerability
A use-after-free vulnerability was discovered in the deserialization of SPLObjectStorage objects that can be abused for leaking arbitrary memory blocks or execute arbitrary code remotely. Affected...
View ArticleWinners of the Month of PHP Security
The Month of PHP Security is over and the MOPS CFP Committee has made a final decision about the ranking of the articles and tools submitted to us. And the winners are… 1000 EUR + SyScan VIP Ticket +...
View ArticleMOPS-2010-060: PHP Session Serializer Session Data Injection Vulnerability
PHP’s default sesson serializer wrongly handles the PS_UNDEF_MARKER character Affected versions Affected is PHP 5.2 <= 5.2.13 Affected is PHP 5.3 <= 5.3.2 Credits The vulnerability was discovered...
View ArticleMOPS-2010-059: PHP php_mysqlnd_auth_write() Stack Buffer Overflow Vulnerability
PHP’s php_mysqlnd_auth_write() does not check user supplied values which can result in a stack based buffer overflow. Affected versions Affected is PHP 5.3 <= 5.3.2 Credits The vulnerability was...
View ArticleMOPS-2010-058: PHP php_mysqlnd_read_error_from_line() Buffer Overflow...
PHP’s php_mysqlnd_read_error_from_line() trusts network data which can result in a heap based buffer overflow. Affected versions Affected is PHP 5.3 <= 5.3.2 Credits The vulnerability was discovered...
View ArticleMOPS-2010-057: PHP php_mysqlnd_rset_header_read() Buffer Overflow Vulnerability
PHP’s php_mysqlnd_rset_header_read() trusts network data which can result in a heap based buffer overflow. Affected versions Affected is PHP 5.3 <= 5.3.2 Credits The vulnerability was discovered by...
View ArticleMOPS-2010-056: PHP php_mysqlnd_ok_read() Information Leak Vulnerability
PHP’s php_mysqlnd_ok_read() trusts network data which can result in a heap information leak. Affected versions Affected is PHP 5.3 <= 5.3.2 Credits The vulnerability was discovered by Stefan Esser...
View ArticleArticle: Virtual Meta-Scripting Bytecode for PHP and JavaScript
As a last minute addition to the Month of PHP Security we present an article by Ben Fuhrmannek about virtual meta-scripting bytecode for PHP and JavaScript. Ben Fuhrmannek, 2010-05-31 Abstract Both PHP...
View ArticleMOPS-2010-055: PHP ArrayObject::uasort() Interruption Memory Corruption...
PHP’s ArrayObject::uasort() method can be interrupted and used for memory corruption attacks. Affected versions Affected is PHP 5.2 <= 5.2.13 Affected is PHP 5.3 <= 5.3.2 Credits The...
View ArticleMOPS-2010-054: PHP ZEND_CONCAT/ZEND_ASSIGN_CONCAT Opcode Interruption...
PHP’s ZEND_CONCAT/ZEND_ASSIGN_CONCAT opcodes can be abused for information leakage or memory corruption by a userspace error handler interruption attack. This can be leveraged to execute arbitrary...
View Article
![BLACKPINK – DEADLINE – EP [iTunes Plus M4A]](http://is1-ssl.mzstatic.com/image/thumb/Video211/v4/de/b3/b1/deb3b1d4-ba28-22e8-2428-ef97617b2a4b/90d54d743002a6d66308f217cd867947_Preview_Image_Intermediate_nonvideo_sdr_426725135_2574858051.png/316x316bb.webp)
