CVE-2007-1475 Multiple buffer overflows in the (1) ibase_connect and (2) ibase_pconnect functions in the interbase extension in PHP 4.4.6 and earlier allow context-dependent attackers to execute arbitrary code via....
MediumCVSS 5.4
EPSS 2.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple buffer overflows in the (1) ibase_connect and (2) ibase_pconnect functions in the interbase extension in PHP 4.4.6 and earlier allow context-dependent attackers to execute arbitrary code via a long argument.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP | <= 4.4.6 | No fix listed |
References
- retrogod.altervista.org broken-link
- 24529 third-party-advisory
- 2439 exploit third-party-advisory
- 20070315 PHP <= 4.4.6 ibase_connect() local buffer overflow mailing-list third-party-advisory vdb-entry
- 22976 third-party-advisory vdb-entry
- php-interbase-extension-bo(33019) third-party-advisory vdb-entry
- 3488 exploit third-party-advisory vdb-entry