title: Multiple vulnerabilities have been reported in PHP
body: <p>I am managing all PHP projects in my company. I got a report from security saying </p>
  
  <blockquote>
    <ol>
    <li><p>PHP _php_stream_scandir() function- Arbitrary Code  execution
    Vulnerability (CVE-2012-2688)
    The vulnerability is caused by an error in the _php_stream_scandir()
    function , which resides in 'main/streams/streams.c'. An attacker can
    trigger an overflow in the _php_stream_scandir() function to execute
    arbitrary code.</p></li>
    <li><p>PHP SQLite- Bypass Restrictions Vulnerability (CVE-2012-3365) 
    This vulnerability is caused by an error in SQLite to bypass open_basedir
    protection mechanism, which could be exploited by remote attackers to
    crash a vulnerable server, creating a denial of service condition.
    Note: This vulnerability does not affect PHP versions 5.4.x</p></li>
    </ol>
  </blockquote>
  
  <p>So they are telling us to upgrade all systems to 5.4.5. Does the above points effects projects too much or should is it fine to continue. Because i did not get to understand about the vulnerabilities they are talking about.</p>