Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2007-4661
HistorySep 04, 2007 - 10:17 p.m.

CVE-2007-4661

2007-09-0422:17:00
CWE-399
CWE-119
[email protected]
web.nvd.nist.gov
35
cve-2007-4661
php 5.2.3
chunk_split function
buffer overflow
precision loss
integer arithmetic
floating point
cve-2007-2872

6.5 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.015 Low

EPSS

Percentile

86.9%

JSON

The chunk_split function in string.c in PHP 5.2.3 does not properly calculate the needed buffer size due to precision loss when performing integer arithmetic with floating point numbers, which has unknown attack vectors and impact, possibly resulting in a heap-based buffer overflow. NOTE: this is due to an incomplete fix for CVE-2007-2872.

CPENameOperatorVersion
php:phpphpeq5.2.3

Related

prion 2
ubuntucve 2
veracode 2
cve 1
nessus 27
openvas 26
ubuntu 2
redhat 5
securityvulns 2
freebsd 1
slackware 1
suse 2
centos 3
gentoo 1
fedora 1
oraclelinux 2
prion
prion
Heap overflow
2007-09-04 22:17:00
Integer overflow
2007-06-04 17:30:00
ubuntucve
ubuntucve
CVE-2007-4661
2007-09-04 00:00:00
CVE-2007-2872
2007-06-04 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:18:59
Arbitrary Code Execution
2020-04-10 00:20:27
cve
cve
CVE-2007-2872
2007-06-04 17:30:00
nessus
nessus
openSUSE 10 Security Update : apache2-mod_php5 (apache2-mod_php5-4909)
2008-01-27 00:00:00
Ubuntu 7.10 : php5 regression (USN-549-2)
2007-12-04 00:00:00
Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : php5 vulnerabilities (USN-549-1)
2007-11-30 00:00:00
openvas
openvas
Ubuntu Update for php5 vulnerabilities USN-549-1
2009-03-23 00:00:00
Ubuntu Update for php5 regression USN-549-2
2009-03-23 00:00:00
FreeBSD Ports: php5
2008-09-04 00:00:00
ubuntu
ubuntu
PHP vulnerabilities
2007-11-29 00:00:00
PHP regression
2007-12-03 00:00:00
redhat
redhat
(RHSA-2007:0917) Moderate: php security update
2007-10-23 00:00:00
(RHSA-2007:0888) Moderate: php security update
2007-10-23 00:00:00
(RHSA-2007:0891) Moderate: php security update
2007-10-25 00:00:00
securityvulns
securityvulns
[OpenPKG-SA-2007.020] OpenPKG Security Advisory (php)
2007-06-01 00:00:00
PHP multiple security vulnerabilities
2007-06-01 00:00:00
freebsd
freebsd
php -- multiple vulnerabilities
2007-08-30 00:00:00
slackware
slackware
[slackware-security] php5
2007-06-01 21:19:18
suse
suse
remote code execution in php4, php5
2008-01-29 14:18:48
remote denial of service in php4,php5
2007-07-12 16:26:43
centos
centos
php security update
2007-10-24 03:08:58
php security update
2007-09-20 14:31:37
php security update
2007-09-26 09:03:28
gentoo
gentoo
PHP: Multiple vulnerabilities
2007-10-07 00:00:00
fedora
fedora
[SECURITY] Fedora Core 6 Update: php-5.1.6-3.7.fc6
2007-09-24 20:33:40
oraclelinux
oraclelinux
Moderate: php security update
2007-09-26 00:00:00
Moderate: php security update
2007-09-20 00:00:00

6.5 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.015 Low

EPSS

Percentile

86.9%

JSON
Related for CVE-2007-4661
prion2ubuntucve2veracode2cve1nessus27openvas26ubuntu2redhat5securityvulns2freebsd1slackware1suse2centos3gentoo1fedora1oraclelinux2