PT-2007-5747 · Microsoft+1 · Iis+1

Boecke · Publicado 2007-08-28 · Atualizado 2017-09-29 · CVE-2007-4586

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.2.0

Description The issue is related to multiple buffer overflows in the iisfunc extension, specifically in the php iisfunc.dll file. This allows context-dependent attackers to execute arbitrary code, likely during Unicode conversion. The vulnerability can be triggered by a long string in the first argument to the iis getservicestate function, and is also related to the ServiceId argument in functions such as fnStartService, fnGetServiceState, and fnStopService.

Recommendations For PHP versions prior to 5.2.0, update to a version that is 5.2.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the iisfunc extension or limiting the input to the iis getservicestate function and related functions to prevent exploitation.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-4586

Produtos afetados

Iis

Php

Referências · 7

• 🔥 https://exploit-db.com/exploits/4318 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-4586 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36262 · Nota
• http://securityfocus.com/bid/25452 · Nota
• http://milw0rm.com/exploits/4318 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4586 · Nota
• http://xforce.iss.net/xforce/xfdb/36262 · Nota