• info
• discussion
• exploit
• solution
• references

PHP ZVAL Reference Counter Integer Overflow Vulnerability

Solution:
Please see the referenced advisories for information on obtaining and applying the appropriate updates.


HP Systems Management HomePage 2.1.7.168

• HP HP System Management Homepage for Linux
  http://h18023.www1.hp.com/support/files/server/us/download/26864.html


• HP HP System Management Homepage for Linux (AMD64/EM64T)
  http://h18023.www1.hp.com/support/files/server/us/download/26866.html


• HP HP System Management Homepage for Windows
  http://h18023.www1.hp.com/support/files/server/us/download/26977.html

PHP PHP 4.4.4

• Debian libapache-mod-php4_4.4.4-8+etch2_sparc.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/libapache-mod-php4 _4.4.4-8+etch2_sparc.deb


• Debian libapache2-mod-php4_4.4.4-8+etch2_sparc.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/libapache2-mod-php 4_4.4.4-8+etch2_sparc.deb


• Debian php4-cgi_4.4.4-8+etch2_s390.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.4.4-8+e tch2_s390.deb


• Debian php4-cgi_4.4.4-8+etch2_sparc.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-cgi_4.4.4-8+e tch2_sparc.deb


• Debian php4-cli_4.4.4-8+etch2_s390.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-cli_4.4.4-8+e tch2_s390.deb


• Debian php4-cli_4.4.4-8+etch2_sparc.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-cli_4.4.4-8+e tch2_sparc.deb


• Debian php4-common_4.4.4-8+etch2_s390.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-common_4.4.4- 8+etch2_s390.deb


• Debian php4-common_4.4.4-8+etch2_sparc.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-common_4.4.4- 8+etch2_sparc.deb


• Debian php4-curl_4.4.4-8+etch2_s390.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.4.4-8+ etch2_s390.deb


• Debian php4-curl_4.4.4-8+etch2_sparc.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-curl_4.4.4-8+ etch2_sparc.deb


• Debian php4-dev_4.4.4-8+etch2_s390.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-dev_4.4.4-8+e tch2_s390.deb


• Debian php4-dev_4.4.4-8+etch2_sparc.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-dev_4.4.4-8+e tch2_sparc.deb


• Debian php4-domxml_4.4.4-8+etch2_s390.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.4.4- 8+etch2_s390.deb


• Debian php4-domxml_4.4.4-8+etch2_sparc.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-domxml_4.4.4- 8+etch2_sparc.deb


• Debian php4-gd_4.4.4-8+etch2_s390.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.4.4-8+et ch2_s390.deb


• Debian php4-gd_4.4.4-8+etch2_sparc.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-gd_4.4.4-8+et ch2_sparc.deb


• Debian php4-imap_4.4.4-8+etch2_s390.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.4.4-8+ etch2_s390.deb


• Debian php4-imap_4.4.4-8+etch2_sparc.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-imap_4.4.4-8+ etch2_sparc.deb


• Debian php4-ldap_4.4.4-8+etch2_s390.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.4.4-8+ etch2_s390.deb


• Debian php4-ldap_4.4.4-8+etch2_sparc.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-ldap_4.4.4-8+ etch2_sparc.deb


• Debian php4-mcal_4.4.4-8+etch2_s390.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.4.4-8+ etch2_s390.deb


• Debian php4-mcal_4.4.4-8+etch2_sparc.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-mcal_4.4.4-8+ etch2_sparc.deb


• Debian php4-mcrypt_4.4.4-8+etch2_s390.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-mcrypt_4.4.4- 8+etch2_s390.deb


• Debian php4-mcrypt_4.4.4-8+etch2_sparc.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-mcrypt_4.4.4- 8+etch2_sparc.deb


• Debian php4-mhash_4.4.4-8+etch2_s390.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.4.4-8 +etch2_s390.deb


• Debian php4-mhash_4.4.4-8+etch2_sparc.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-mhash_4.4.4-8 +etch2_sparc.deb


• Debian php4-mysql_4.4.4-8+etch2_s390.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.4.4-8 +etch2_s390.deb


• Debian php4-mysql_4.4.4-8+etch2_sparc.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-mysql_4.4.4-8 +etch2_sparc.deb


• Debian php4-odbc_4.4.4-8+etch2_s390.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.4.4-8+ etch2_s390.deb


• Debian php4-odbc_4.4.4-8+etch2_sparc.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-odbc_4.4.4-8+ etch2_sparc.deb


• Debian php4-pgsql_4.4.4-8+etch2_s390.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-pgsql_4.4.4-8 +etch2_s390.deb


• Debian php4-pgsql_4.4.4-8+etch2_sparc.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-pgsql_4.4.4-8 +etch2_sparc.deb


• Debian php4-pspell_4.4.4-8+etch2_s390.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-pspell_4.4.4- 8+etch2_s390.deb


• Debian php4-pspell_4.4.4-8+etch2_sparc.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-pspell_4.4.4- 8+etch2_sparc.deb


• Debian php4-recode_4.4.4-8+etch2_s390.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.4.4- 8+etch2_s390.deb


• Debian php4-recode_4.4.4-8+etch2_sparc.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-recode_4.4.4- 8+etch2_sparc.deb


• Debian php4-snmp_4.4.4-8+etch2_s390.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.4.4-8+ etch2_s390.deb


• Debian php4-snmp_4.4.4-8+etch2_sparc.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-snmp_4.4.4-8+ etch2_sparc.deb


• Debian php4-sybase_4.4.4-8+etch2_s390.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.4.4- 8+etch2_s390.deb


• Debian php4-sybase_4.4.4-8+etch2_sparc.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-sybase_4.4.4- 8+etch2_sparc.deb


• Debian php4-xslt_4.4.4-8+etch2_s390.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.4.4-8+ etch2_s390.deb


• Debian php4-xslt_4.4.4-8+etch2_sparc.deb
  Debian GNU/Linux 4.0 alias etch
  http://security.debian.org/pool/updates/main/p/php4/php4-xslt_4.4.4-8+ etch2_sparc.deb


• Mandriva php4-cgi-4.4.4-1.1.20060mlcs4.i586.rpm
  Corporate 4.0:
  http://www.mandriva.com/en/download


• Mandriva php4-cli-4.4.4-1.1.20060mlcs4.i586.rpm
  Corporate 4.0:
  http://www.mandriva.com/en/download


• Mandriva php4-devel-4.4.4-1.1.20060mlcs4.i586.rpm
  Corporate 4.0:
  http://www.mandriva.com/en/download


• Mandriva php4-gd-4.4.4-1.1.20060mlcs4.i586.rpm
  Corporate 4.0:
  http://www.mandriva.com/en/download


• Mandriva php4-gd-4.4.4-1.1.20060mlcs4.x86_64.rpm
  Corporate 4.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva php4-mbstring-4.4.4-1.1.20060mlcs4.i586.rpm
  Corporate 4.0:
  http://www.mandriva.com/en/download


• Mandriva php4-mbstring-4.4.4-1.1.20060mlcs4.x86_64.rpm
  Corporate 4.0/X86_64:
  http://www.mandriva.com/en/download


• Mandriva php4-sqlite-1.0.3-5.1.20060mlcs4.i586.rpm
  Corporate 4.0:
  http://www.mandriva.com/en/download


• Mandriva php4-sqlite-1.0.3-5.1.20060mlcs4.x86_64.rpm
  Corporate 4.0/X86_64:
  http://www.mandriva.com/en/download