PT-2007-5215 · Php+1 · Php+1

Publicado 2007-09-04 · Atualizado 2018-10-26 · CVE-2007-3998

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: PHP versions prior to 4.4.8 PHP versions prior to 5.2.4

Description: The issue is related to the wordwrap function, which does not properly utilize the breakcharlen variable. This allows remote attackers to cause a denial of service, resulting in a divide-by-zero error, application crash, or infinite loop, by providing certain arguments, such as a chr(0), 0, "" argument set.

Recommendations: For PHP versions prior to 4.4.8, update to version 4.4.8 or later. For PHP versions prior to 5.2.4, update to version 5.2.4 or later.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2007-3998

DSA-1444-1

DSA-1578-1

DTSA-61-1

RHSA-2007:0889

RHSA-2007:0890

RHSA-2007:0891

RHSA-2007:0917

RHSA-2007_0890

Produtos afetados

Php

Red Hat

Referências · 50

• http://ubuntu.com/usn/usn-549-2 · Aviso do Fabricante
• http://secunia.com/advisories/27377 · Nota
• http://secunia.com/advisories/26822 · Nota
• http://debian.org/security/2008/dsa-1444 · Aviso do Fabricante
• http://support.avaya.com/elmodocs2/security/ASA-2007-449.htm · Nota
• http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html · Aviso do Fabricante
• http://secunia.com/advisories/28249 · Nota
• http://secunia.com/advisories/26895 · Nota
• http://secunia.com/advisories/26642 · Nota
• http://secunia.com/advisories/26930 · Nota
• https://access.redhat.com/security/cve/CVE-2007-2872 · Nota
• http://debian.org/security/2008/dsa-1578 · Aviso do Fabricante
• https://access.redhat.com/errata/RHSA-2007:0890 · Nota
• http://secunia.com/advisories/26838 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3998 · Nota