CVE-2007-1286 Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unserialize function, which triggers the overflow in the ZVAL ref...
MediumCVSS 6.8
EPSS 40.9%
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unserialize function, which triggers the overflow in the ZVAL reference counter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP | <= 4.4.4 | No fix listed |
References
- SSRT071423 vendor-advisory
- HPSBTU02232 vendor-advisory
- RHSA-2007:0154 vendor-advisory
- RHSA-2007:0155 vendor-advisory
- RHSA-2007:0163 vendor-advisory
- 24419 third-party-advisory
- 24606 third-party-advisory
- 24910 third-party-advisory
- 24924 third-party-advisory
- 24941 third-party-advisory
- 24945 third-party-advisory
- 25025 third-party-advisory
- 25062 third-party-advisory
- 25423 third-party-advisory
- 25445 third-party-advisory
- 25850 third-party-advisory
- GLSA-200703-21 vendor-advisory
- GLSA-200705-19 vendor-advisory
- DSA-1282 vendor-advisory
- DSA-1283 vendor-advisory
- MDKSA-2007:087 vendor-advisory
- MDKSA-2007:088 vendor-advisory
- 32771 vdb-entry
- www.php-security.org exploit patch vendor-advisory
- 20070418 rPSA-2007-0073-1 php php-mysql php-pgsql mailing-list
- 22765 vdb-entry
- 2007-0009 vendor-advisory
- ADV-2007-1991 vdb-entry
- ADV-2007-2374 vdb-entry
- php-zval-code-execution(32796) vdb-entry
- issues.rpath.com
- oval:org.mitre.oval:def:11575 signature vdb-entry