PT-2007-2423 · Php+1 · Php+1

Published 2007-02-19 · Updated 2019-10-09 · CVE-2007-0988

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: PHP versions prior to 5.2.1 PHP versions prior to 4.4.5

Description: The issue allows context-dependent attackers to cause a denial of service (infinite loop) by unserializing certain integer expressions. This occurs when running on a 64-bit platform, where 32-bit arguments are used after the check for a negative value.

Recommendations: For PHP versions prior to 5.2.1, update to version 5.2.1 or later to resolve the issue. For PHP versions prior to 4.4.5, update to version 4.4.5 or later to resolve the issue.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-0988

DSA-1264-1

RHSA-2007:0076

RHSA-2007:0081

RHSA-2007:0082

RHSA-2007:0088

RHSA-2007:0089

RHSA-2007_0076

RHSA-2007_0082

Affected Products

Php

Red Hat

References · 64

• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0988 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2007:048 · Vendor Advisory
• http://ubuntu.com/usn/usn-424-2 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2007-0089.html · Vendor Advisory
• http://novell.com/linux/security/advisories/2007_32_php.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0081.html · Vendor Advisory
• http://openpkg.com/security/advisories/OpenPKG-SA-2007.010.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2007-0082.html · Vendor Advisory
• http://us.debian.org/security/2007/dsa-1264 · Vendor Advisory
• http://ubuntu.com/usn/usn-424-1 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200703-21.xml · Vendor Advisory
• http://php.net/releases/5_2_1.php · Patch
• http://redhat.com/support/errata/RHSA-2007-0076.html · Vendor Advisory
• http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137 · Vendor Advisory