CVE-2007-1383 Integer overflow in the 16 bit variable reference counter in PHP 4 allows context-dependent attackers to execute arbitrary code by overflowing this counter, which causes the same variable to be destro...
HighCVSS 10.0
EPSS 15.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the 16 bit variable reference counter in PHP 4 allows context-dependent attackers to execute arbitrary code by overflowing this counter, which causes the same variable to be destroyed twice, a related issue to CVE-2007-1286.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP | = 4.0 | No fix listed |
References
- 24606 third-party-advisory
- 25056 third-party-advisory
- GLSA-200703-21 vendor-advisory
- SUSE-SA:2007:032 vendor-advisory
- 32770 vdb-entry
- www.php-security.org exploit
- 22765 vdb-entry