CVE-2007-1521

Severity

68%

Complexity

86%

Confidentiality

106%

Double free vulnerability in PHP before 4.4.7, and 5.x before 5.2.2, allows context-dependent attackers to execute arbitrary code by interrupting the session_regenerate_id function, as demonstrated by calling a userspace error handler or triggering a memory limit violation.

Double free vulnerability in PHP before 4.4.7, and 5.x before 5.2.2, allows context-dependent attackers to execute arbitrary code by interrupting the session_regenerate_id function, as demonstrated by calling a userspace error handler or triggering a memory limit violation.

CVSS 2.0 Base Score 6.8. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:P/I:P/A:P).

Overview

First reported 17 years ago

2007-03-20 20:19:00

Last updated 13 years ago

2011-03-08 02:52:00

Affected Software

PHP PHP

References

http://docs.info.apple.com/article.html?artnum=306172

APPLE-SA-2007-07-31

24505

Vendor Advisory

25025

Vendor Advisory

25056

25057

Vendor Advisory

25062

Vendor Advisory

25445

26235

GLSA-200705-19

http://us2.php.net/releases/4_4_7.php

http://us2.php.net/releases/5_2_2.php

DSA-1282

DSA-1283

SUSE-SA:2007:032

http://www.php-security.org/MOPB/MOPB-22-2007.html

Exploit, Vendor Advisory

22968

25159

USN-455-1

ADV-2007-0960

ADV-2007-2732

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.