Lucene search
MitreCVE-2007-1883HistoryApr 06, 2007 - 1:19 a.m.
CVE-2007-1883
2007-04-0601:19:00
mitre
web.nvd.nist.gov
55
cve-2007-1883
php security
memory
nvd
iptcembed
user space error handler
convert_to_* functions
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
AI Score
7.5
Confidence
High
EPSS
0.004
Percentile
73.5%
PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent attackers to read arbitrary memory locations via an interruption that triggers a user space error handler that changes a parameter to an arbitrary pointer, as demonstrated via the iptcembed function, which calls certain convert_to_* functions with its input parameters.
Affected configurations
Node
phpphpMatch4.0.0
ORphpphpMatch4.0.1
ORphpphpMatch4.0.1patch1
ORphpphpMatch4.0.1patch2
ORphpphpMatch4.0.2
ORphpphpMatch4.0.3
ORphpphpMatch4.0.3patch1
ORphpphpMatch4.0.4
ORphpphpMatch4.0.4patch1
ORphpphpMatch4.0.5
ORphpphpMatch4.0.6
ORphpphpMatch4.0.7
ORphpphpMatch4.0.7rc1
ORphpphpMatch4.0.7rc2
ORphpphpMatch4.0.7rc3
ORphpphpMatch4.1.0
ORphpphpMatch4.1.1
ORphpphpMatch4.1.2
ORphpphpMatch4.2dev
ORphpphpMatch4.2.0
ORphpphpMatch4.2.1
ORphpphpMatch4.2.2
ORphpphpMatch4.2.3
ORphpphpMatch4.3.0
ORphpphpMatch4.3.1
ORphpphpMatch4.3.2
ORphpphpMatch4.3.3
ORphpphpMatch4.3.4
ORphpphpMatch4.3.5
ORphpphpMatch4.3.6
ORphpphpMatch4.3.7
ORphpphpMatch4.3.8
ORphpphpMatch4.3.9
ORphpphpMatch4.3.10
ORphpphpMatch4.3.11
ORphpphpMatch4.4.0
ORphpphpMatch4.4.1
ORphpphpMatch4.4.2
ORphpphpMatch4.4.3
ORphpphpMatch4.4.4
ORphpphpMatch4.4.5
ORphpphpMatch4.4.6
ORphpphpMatch5.0rc1
ORphpphpMatch5.0rc2
ORphpphpMatch5.0rc3
ORphpphpMatch5.0.0
ORphpphpMatch5.0.0beta1
ORphpphpMatch5.0.0beta2
ORphpphpMatch5.0.0beta3
ORphpphpMatch5.0.0beta4
ORphpphpMatch5.0.0rc1
ORphpphpMatch5.0.0rc2
ORphpphpMatch5.0.0rc3
ORphpphpMatch5.0.1
ORphpphpMatch5.0.2
ORphpphpMatch5.0.3
ORphpphpMatch5.0.4
ORphpphpMatch5.0.5
ORphpphpMatch5.1.0
ORphpphpMatch5.1.1
ORphpphpMatch5.1.2
ORphpphpMatch5.1.3
ORphpphpMatch5.1.4
ORphpphpMatch5.1.5
ORphpphpMatch5.1.6
ORphpphpMatch5.2.0
ORphpphpMatch5.2.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| php | php | 4.0.0 | cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:* |
| php | php | 4.0.1 | cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:* |
| php | php | 4.0.1 | cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:* |
| php | php | 4.0.1 | cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:* |
| php | php | 4.0.2 | cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:* |
| php | php | 4.0.3 | cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:* |
| php | php | 4.0.3 | cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:* |
| php | php | 4.0.4 | cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:* |
| php | php | 4.0.4 | cpe:2.3:a:php:php:4.0.4:patch1:*:*:*:*:*:* |
| php | php | 4.0.5 | cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:* |
Related
ubuntucve
ubuntucve
CVE-2007-1883
2007-04-06 00:00:00
prion
prion
Design/Logic Flaw
2007-04-06 01:19:00
cvelist
cvelist
CVE-2007-1883
2007-04-06 01:00:00
securityvulns
securityvulns
PHP iptcembed() function information leak
2007-03-31 00:00:00
redhatcve
redhatcve
CVE-2007-1883
2015-10-30 09:25:16
nvd
nvd
CVE-2007-1883
2007-04-06 01:19:00
nessus
nessus
PHP < 4.4.7 / 5.2.2 Multiple Vulnerabilities
2007-05-04 00:00:00
GLSA-200710-02 : PHP: Multiple vulnerabilities
2007-10-09 00:00:00
gentoo
gentoo
PHP: Multiple vulnerabilities
2007-10-07 00:00:00
openvas
openvas
Gentoo Security Advisory GLSA 200710-02 (php)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200710-02 (php)
2008-09-24 00:00:00
CVSS2
7.8
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
AI Score
7.5
Confidence
High
EPSS
0.004
Percentile
73.5%
Related for CVE-2007-1883