CVE-2007-1709 Buffer overflow in the confirm_phpdoc_compiled function in the phpDOC extension (PECL phpDOC) in PHP 5.2.1 allows context-dependent attackers to execute arbitrary code via a long argument string.
MediumCVSS 4.3
EPSS 2.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the confirm_phpdoc_compiled function in the phpDOC extension (PECL phpDOC) in PHP 5.2.1 allows context-dependent attackers to execute arbitrary code via a long argument string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP | = 5.2.1 | No fix listed |
References
- retrogod.altervista.org
- 2512 third-party-advisory
- 20070325 PHP 5.2.1 with PECL phpDOC local buffer overflow mailing-list
- 23124 vdb-entry
- phpdoc-confirmcompiled-bo(33236) vdb-entry
- 3576 exploit