CVE-2007-0907

Severity

50%

Complexity

99%

Confidentiality

48%

Buffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via unspecified vectors involving the sapi_header_op function.

Buffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via unspecified vectors involving the sapi_header_op function.

CVSS 2.0 Base Score 5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:N/A:P).

Overview

First reported 18 years ago

2007-02-13 23:28:00

Last updated 6 years ago

2018-10-30 16:25:00

Affected Software

PHP PHP 3.0

3.0

PHP PHP 3.0.1

3.0.1

PHP PHP 3.0.2

3.0.2

PHP PHP 3.0.3

3.0.3

PHP PHP 3.0.4

3.0.4

PHP PHP 3.0.5

3.0.5

PHP PHP 3.0.6

3.0.6

PHP PHP 3.0.7

3.0.7

PHP PHP 3.0.8

3.0.8

PHP PHP 3.0.9

3.0.9

PHP PHP 3.0.10

3.0.10

PHP PHP 3.0.11

3.0.11

PHP PHP 3.0.12

3.0.12

PHP PHP 3.0.13

3.0.13

PHP PHP 3.0.14

3.0.14

PHP PHP 3.0.15

3.0.15

PHP PHP 3.0.16

3.0.16

PHP PHP 3.0.17

3.0.17

PHP PHP 3.0.18

3.0.18

PHP 4.0.0

4.0

PHP PHP 4.0.1

4.0.1

PHP PHP 4.0.2

4.0.2

PHP PHP 4.0.3

4.0.3

PHP PHP 4.0.4

4.0.4

PHP PHP 4.0.5

4.0.5

PHP PHP 4.0.6

4.0.6

PHP PHP 4.0.7

4.0.7

PHP 4.0.7 Release Candidate 1

4.0.7

PHP 4.0.7 Release Candidate 2

4.0.7

PHP 4.0.7 Release Candidate 3

4.0.7

PHP PHP 4.1.0

4.1.0

PHP PHP 4.1.1

4.1.1

PHP PHP 4.1.2

4.1.2

PHP PHP 4.2.0

4.2.0

PHP PHP 4.2.1

4.2.1

PHP PHP 4.2.2

4.2.2

PHP PHP 4.2.3

4.2.3

PHP PHP 4.3.0

4.3.0

PHP PHP 4.3.1

4.3.1

PHP PHP 4.3.2

4.3.2

PHP PHP 4.3.3

4.3.3

PHP PHP 4.3.4

4.3.4

PHP PHP 4.3.5

4.3.5

PHP PHP 4.3.6

4.3.6

PHP PHP 4.3.7

4.3.7

PHP PHP 4.3.8

4.3.8

PHP PHP 4.3.9

4.3.9

PHP PHP 4.3.10

4.3.10

PHP PHP 4.3.11

4.3.11

PHP PHP 4.4.0

4.4.0

PHP PHP 4.4.1

4.4.1

PHP PHP 4.4.2

4.4.2

PHP PHP 4.4.3

4.4.3

PHP PHP 4.4.4

4.4.4

PHP PHP 5.0.0

5.0.0

PHP PHP 5.0.1

5.0.1

PHP PHP 5.0.2

5.0.2

PHP PHP 5.0.3

5.0.3

PHP PHP 5.0.4

5.0.4

PHP PHP 5.0.5

5.0.5

PHP PHP 5.1.0

5.1.0

PHP PHP 5.1.1

5.1.1

PHP PHP 5.1.2

5.1.2

PHP PHP 5.1.3

5.1.3

PHP 5.1.4

5.1.4

PHP PHP 5.1.5

5.1.5

PHP PHP 5.1.6

5.1.6

PHP 5.2.0

5.2.0

Trustix Secure Linux 2.2

2.2

Trustix Secure Linux 3.0

3.0

References

20070201-01-P

SUSE-SA:2007:020

32767

RHSA-2007:0089

24089

24195

24217

24236

24248

24284

24295

24322

24419

24421

24432

24514

24606

24642

GLSA-200703-21

http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm

http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm

MDKSA-2007:048

OpenPKG-SA-2007.010

http://www.php.net/ChangeLog-5.php#5.2.1

http://www.php.net/releases/5_2_1.php

RHSA-2007:0076

RHSA-2007:0081

RHSA-2007:0082

RHSA-2007:0088

20070227 rPSA-2007-0043-1 php php-mysql php-pgsql

22496

Patch

1017671

2007-0009

USN-424-1

USN-424-2

DSA-1264

ADV-2007-0546

https://issues.rpath.com/browse/RPL-1088

oval:org.mitre.oval:def:11321

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.