PT-2007-5699 · Microsoft+1 · Kernel32.Dll+1

Netjackal · Publicado 2007-08-24 · Atualizado 2017-09-29 · CVE-2007-4528

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP version 5.0.5

Description The issue allows context-dependent attackers to execute arbitrary code by loading an arbitrary DLL, such as kernel32.dll, and calling a function, for example, the WinExec function, due to the Foreign Function Interface (ffi) extension not following safe mode restrictions.

Recommendations For PHP version 5.0.5, consider disabling the Foreign Function Interface (ffi) extension as a temporary workaround until a patch is available. Restrict access to arbitrary DLLs to minimize the risk of exploitation. Avoid using the ffi extension to load and call functions from arbitrary DLLs until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2007-4528

Produtos afetados

Php

Kernel32.Dll

Referências · 4

• 🔥 https://exploit-db.com/exploits/4311 · Exploit
• http://milw0rm.com/exploits/4311 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4528 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4528 · Nota