CVE-2007-1824

2007-04-0223:19:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve

buffer overflow

php 5

remote attackers

denial of service

nvd

6.7 Medium

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.025 Low

EPSS

Percentile

90.0%

JSON

Buffer overflow in the php_stream_filter_create function in PHP 5 before 5.2.1 allows remote attackers to cause a denial of service (application crash) via a php://filter/ URL that has a name ending in the ‘.’ character.

CPENameOperatorVersion
php:phpphpeq5.1.5
php:phpphpeq5.1.2
php:phpphpeq5.1.1
php:phpphpeq5.1.6
php:phpphpeq5.0.5
php:phpphpeq5.0.1
php:phpphpeq5.1.4
php:phpphpeq5.0.4
php:phpphpeq5.0.3
php:phpphpeq5.1.0

CPE	Name	Operator	Version
php:php	php	eq	5.1.5
php:php	php	eq	5.1.2
php:php	php	eq	5.1.1
php:php	php	eq	5.1.6
php:php	php	eq	5.0.5
php:php	php	eq	5.0.1
php:php	php	eq	5.1.4
php:php	php	eq	5.0.4
php:php	php	eq	5.0.3
php:php	php	eq	5.1.0