PT-2007-2806 · Clibpdf+1 · Clibpdf+1

Rgod · Published 2007-03-12 · Updated 2017-10-11 · CVE-2007-1412

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions PHP version 4.4.6

Description The issue allows context-dependent attackers to obtain sensitive information, specifically script source code, by providing a long string in the second argument to the cpdf open function in the ClibPDF (cpdf) extension.

Recommendations For PHP version 4.4.6, consider restricting the use of the cpdf open function until a patch is available, or apply configuration changes to limit the input length for the second argument to prevent exploitation.

Exploit

Fix

Related Identifiers

CVE-2007-1412

Affected Products

Clibpdf

Php

References · 7

• 🔥 https://exploit-db.com/exploits/3442 · Exploit
• 🔥 http://securityfocus.com/bid/22897 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-1412 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32986 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1412 · Note
• http://milw0rm.com/exploits/3442 · Note
• http://xforce.iss.net/xforce/xfdb/32986 · Note