PT-2007-3235 · Php · Php

Published 2007-04-05 · Updated 2017-07-29 · CVE-2007-1889

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: PHP version 5.2.0

Description: The issue is related to an integer signedness error in the zend mm alloc int function within the Zend Memory Manager. This error allows remote attackers to execute arbitrary code by sending a large emalloc request. The problem is due to an incorrect signed long cast. Attacks can be demonstrated via the HTTP SOAP client in PHP or through a call to msg receive with the largest positive integer value of maxsize.

Recommendations: For PHP version 5.2.0, consider updating to a newer version to mitigate the risk, as the current version contains a critical integer signedness error that could lead to arbitrary code execution.

Fix

Related Identifiers

CVE-2007-1889

DSA-1283-1

DTSA-39-1

Affected Products

Php

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2007-1889 · Security Note
• http://debian.org/security/2007/dsa-1283 · Vendor Advisory
• http://php-security.org/MOPB/MOPB-43-2007.html · Vendor Advisory
• http://novell.com/linux/security/advisories/2007_32_php.html · Vendor Advisory
• http://php-security.org/MOPB/MOPB-44-2007.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33770 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1889 · Note
• http://secunia.com/advisories/25056 · Note
• http://secunia.com/advisories/25062 · Note
• http://securityfocus.com/bid/23238 · Note