PT-2007-2793 · Php · Pecl Zip+1

Published 2007-03-10 · Updated 2025-12-11 · CVE-2007-1399

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PECL ZIP versions 1.8.3 and earlier PHP versions 5.2.0 and 5.2.1

Description The issue is a stack-based buffer overflow in the zip:// URL wrapper. This allows remote attackers to execute arbitrary code via a long zip:// URL. Attackers can trigger URL access from a remote PHP interpreter, for example, through avatar upload or blog pingback.

Recommendations For PECL ZIP versions 1.8.3 and earlier, update to a version later than 1.8.3 to resolve the issue. For PHP versions 5.2.0 and 5.2.1, consider updating to a version later than 5.2.1 to mitigate the risk. As a temporary workaround, consider restricting access to the zip:// URL wrapper until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2007-1399

DSA-1330-1

Affected Products

Pecl Zip

Php

References · 17

• 🔥 http://php-security.org/MOPB/MOPB-16-2007.html · Exploit
• 🔥 https://exploit-db.com/exploits/3440 · Exploit
• http://debian.org/security/2007/dsa-1330 · Vendor Advisory
• http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1399 · Security Note
• https://t.me/cveNotify/145460 · Telegram Post
• https://t.me/cveNotify/144920 · Telegram Post
• http://frsirt.com/english/advisories/2007/0898 · Note
• http://vupen.com/english/advisories/2007/0898 · Note
• http://secunia.com/advisories/24514 · Note
• http://secunia.com/advisories/24471 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32889 · Note
• http://secunia.com/advisories/25938 · Note
• http://xforce.iss.net/xforce/xfdb/32889 · Note
• http://securityfocus.com/bid/22883 · Note