Lucene search
Ubuntu.comUB:CVE-2007-2872HistoryJun 04, 2007 - 12:00 a.m.
CVE-2007-2872
2007-06-0400:00:00
ubuntu.com
ubuntu.com
12
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.258 Low
EPSS
Percentile
96.6%
Multiple integer overflows in the chunk_split function in PHP 5 before
5.2.3 and PHP 4 before 4.4.8 allow remote attackers to cause a denial of
service (crash) or execute arbitrary code via the (1) chunks, (2) srclen,
and (3) chunklen arguments.
Notes
| Author | Note |
|---|---|
| jdstrand | see CVE-2007-4661 for complete fix |
Related
cve
cve
CVE-2007-4661
2007-09-04 22:17:00
CVE-2007-2872
2007-06-04 17:30:00
prion
prion
Heap overflow
2007-09-04 22:17:00
Integer overflow
2007-06-04 17:30:00
ubuntucve
ubuntucve
CVE-2007-4661
2007-09-04 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:18:59
Arbitrary Code Execution
2020-04-10 00:20:27
securityvulns
securityvulns
[OpenPKG-SA-2007.020] OpenPKG Security Advisory (php)
2007-06-01 00:00:00
PHP multiple security vulnerabilities
2007-06-01 00:00:00
nessus
nessus
Slackware 10.2 / 11.0 / current : php5 (SSA:2007-152-01)
2007-06-04 00:00:00
openSUSE 10 Security Update : apache2-mod_php5 (apache2-mod_php5-4909)
2008-01-27 00:00:00
Ubuntu 7.10 : php5 regression (USN-549-2)
2007-12-04 00:00:00
openvas
openvas
Ubuntu Update for php5 vulnerabilities USN-549-1
2009-03-23 00:00:00
Slackware: Security Advisory (SSA:2007-152-01)
2012-09-10 00:00:00
HP-UX Update for Apache HPSBUX02308
2009-05-05 00:00:00
slackware
slackware
[slackware-security] php5
2007-06-01 21:19:18
ubuntu
ubuntu
PHP vulnerabilities
2007-11-29 00:00:00
PHP regression
2007-12-03 00:00:00
centos
centos
php security update
2007-10-24 03:08:58
php security update
2007-09-20 14:31:37
php security update
2007-09-26 09:03:28
redhat
redhat
(RHSA-2007:0888) Moderate: php security update
2007-10-23 00:00:00
(RHSA-2007:0917) Moderate: php security update
2007-10-23 00:00:00
(RHSA-2007:0891) Moderate: php security update
2007-10-25 00:00:00
freebsd
freebsd
php -- multiple vulnerabilities
2007-08-30 00:00:00
fedora
fedora
[SECURITY] Fedora Core 6 Update: php-5.1.6-3.7.fc6
2007-09-24 20:33:40
oraclelinux
oraclelinux
Moderate: php security update
2007-09-26 00:00:00
Moderate: php security update
2007-09-20 00:00:00
suse
suse
remote code execution in php4, php5
2008-01-29 14:18:48
remote denial of service in php4,php5
2007-07-12 16:26:43
gentoo
gentoo
PHP: Multiple vulnerabilities
2007-10-07 00:00:00
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.258 Low
EPSS
Percentile
96.6%
Related for UB:CVE-2007-2872