Lucene search

K
cve[email protected]CVE-2007-1412
HistoryMar 12, 2007 - 11:19 p.m.

CVE-2007-1412

2007-03-1223:19:00
NVD-CWE-Other
web.nvd.nist.gov
29
cve-2007-1412
cpdf_open
clibpdf
php 4.4.6
security vulnerability

6.1 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.005 Low

EPSS

Percentile

77.1%

The cpdf_open function in the ClibPDF (cpdf) extension in PHP 4.4.6 allows context-dependent attackers to obtain sensitive information (script source code) via a long string in the second argument.

CPENameOperatorVersion
php:phpphpeq4.4.6

6.1 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.005 Low

EPSS

Percentile

77.1%

Related for CVE-2007-1412