| Description: | Symeon Paraschoudis discovered that PHP incorrectly handled the mkgmtimefunction. A remote attacker could possibly use this issue to cause PHP tocrash, resulting in a denial of service. (CVE-2014-3668)Symeon Paraschoudis discovered that PHP incorrectly handled unserializingobjects. A remote attacker could possibly use this issue to cause PHP tocrash, resulting in a denial of service. (CVE-2014-3669)Otto Ebeling discovered that PHP incorrectly handled the exif_thumbnailfunction. A remote attacker could use this issue to cause PHP to crash,resulting in a denial of service, or possibly execute arbitrary code.(CVE-2014-3670)Francisco Alonso that PHP incorrectly handled ELF files in the fileinfoextension. A remote attacker could possibly use this issue to cause PHP tocrash, resulting in a denial of service. (CVE-2014-3710)It was discovered that PHP incorrectly handled NULL bytes when processingcertain URLs with the curl functions. A remote attacker could possibly usethis issue to bypass filename restrictions and obtain access to sensitivefiles. (No CVE number) |