PRIOn knowledge basePRION:CVE-2007-1885

HistoryApr 06, 2007 - 1:19 a.m.

Integer overflow

2007-04-0601:19:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

Low

0.018 Low

EPSS

Percentile

88.2%

JSON

Integer overflow in the str_replace function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 allows context-dependent attackers to execute arbitrary code via a single character search string in conjunction with a long replacement string, which overflows a 32 bit length counter. NOTE: this is probably the same issue as CVE-2007-0906.6.

CPENameOperatorVersion
phpeq4.3.9
phpeq5.1.5
phpeq5.1.2
phpeq4.2.0
phpeq5.1.1
phpeq4.4.4
phpeq5.0.0 beta1
phpeq4.1.0
phpeq5.1.6
phpeq4.3.4

Name	Operator	Version
php	eq	4.3.9
php	eq	5.1.5
php	eq	5.1.2
php	eq	4.2.0
php	eq	5.1.1
php	eq	4.4.4
php	eq	5.0.0 beta1
php	eq	4.1.0
php	eq	5.1.6
php	eq	4.3.4

Rows per page:

1-10 of 661

References

h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506

h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137

secunia.com/advisories/25423

secunia.com/advisories/25850

www.php-security.org/MOPB/MOPB-39-2007.html

www.php.net/releases/5_2_1.php

www.securityfocus.com/bid/23233

www.vupen.com/english/advisories/2007/1991

www.vupen.com/english/advisories/2007/2374

exchange.xforce.ibmcloud.com/vulnerabilities/33767