Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2007-4661
HistorySep 04, 2007 - 10:17 p.m.

CVE-2007-4661

2007-09-0422:17:00
CWE-119
CWE-399
mitre
web.nvd.nist.gov
47
cve-2007-4661
php 5.2.3
chunk_split function
buffer overflow
precision loss
integer arithmetic
floating point
cve-2007-2872

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

High

EPSS

0.35

Percentile

97.2%

JSON

The chunk_split function in string.c in PHP 5.2.3 does not properly calculate the needed buffer size due to precision loss when performing integer arithmetic with floating point numbers, which has unknown attack vectors and impact, possibly resulting in a heap-based buffer overflow. NOTE: this is due to an incomplete fix for CVE-2007-2872.

Affected configurations

Nvd
Node
phpphpMatch5.2.3
VendorProductVersionCPE
phpphp5.2.3cpe:/a:php:php:5.2.3:::

Related

ubuntucve 2
prion 2
nvd 2
cvelist 2
veracode 2
cve 1
nessus 27
redhat 5
ubuntu 2
openvas 34
securityvulns 2
freebsd 1
slackware 1
suse 2
centos 3
gentoo 1
fedora 1
oraclelinux 2
ubuntucve
ubuntucve
CVE-2007-4661
2007-09-04 00:00:00
CVE-2007-2872
2007-06-04 00:00:00
prion
prion
Heap overflow
2007-09-04 22:17:00
Integer overflow
2007-06-04 17:30:00
nvd
nvd
CVE-2007-4661
2007-09-04 22:17:00
CVE-2007-2872
2007-06-04 17:30:00
cvelist
cvelist
CVE-2007-4661
2007-09-04 22:00:00
CVE-2007-2872
2007-06-04 17:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:18:59
Arbitrary Code Execution
2020-04-10 00:20:27
cve
cve
CVE-2007-2872
2007-06-04 17:30:00
nessus
nessus
openSUSE 10 Security Update : apache2-mod_php5 (apache2-mod_php5-4909)
2008-01-27 00:00:00
Ubuntu 7.10 : php5 regression (USN-549-2)
2007-12-04 00:00:00
Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : php5 vulnerabilities (USN-549-1)
2007-11-30 00:00:00
redhat
redhat
(RHSA-2007:0917) Moderate: php security update
2007-10-23 00:00:00
(RHSA-2007:0888) Moderate: php security update
2007-10-23 00:00:00
(RHSA-2007:0891) Moderate: php security update
2007-10-25 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2007-11-29 00:00:00
PHP regression
2007-12-03 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-549-1)
2009-03-23 00:00:00
Ubuntu: Security Advisory (USN-549-2)
2009-03-23 00:00:00
Ubuntu Update for php5 regression USN-549-2
2009-03-23 00:00:00
securityvulns
securityvulns
[OpenPKG-SA-2007.020] OpenPKG Security Advisory (php)
2007-06-01 00:00:00
PHP multiple security vulnerabilities
2007-06-01 00:00:00
freebsd
freebsd
php -- multiple vulnerabilities
2007-08-30 00:00:00
slackware
slackware
[slackware-security] php5
2007-06-01 21:19:18
suse
suse
remote code execution in php4, php5
2008-01-29 14:18:48
remote denial of service in php4,php5
2007-07-12 16:26:43
centos
centos
php security update
2007-10-24 03:08:58
php security update
2007-09-20 14:31:37
php security update
2007-09-26 09:03:28
gentoo
gentoo
PHP: Multiple vulnerabilities
2007-10-07 00:00:00
fedora
fedora
[SECURITY] Fedora Core 6 Update: php-5.1.6-3.7.fc6
2007-09-24 20:33:40
oraclelinux
oraclelinux
Moderate: php security update
2007-09-26 00:00:00
Moderate: php security update
2007-09-20 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

High

EPSS

0.35

Percentile

97.2%

JSON
Related for CVE-2007-4661
ubuntucve2prion2nvd2cvelist2veracode2cve1nessus27redhat5ubuntu2openvas34securityvulns2freebsd1slackware1suse2centos3gentoo1fedora1oraclelinux2