CVE-2007-4255 Buffer overflow in the mSQL extension in PHP 5.2.3 allows context-dependent attackers to execute arbitrary code via a long first argument to the msql_connect function.
HighCVSS 7.5
EPSS 9.3%
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the mSQL extension in PHP 5.2.3 allows context-dependent attackers to execute arbitrary code via a long first argument to the msql_connect function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| PHP | = 5.2.3 | No fix listed |
References
- 20070805 PHP mSQL (msql_connect) Buffer Overflow PoC mailing-list
- 25213 vdb-entry
- php-msql-connect-bo(35830) vdb-entry
- 4260 exploit