PT-2007-5699 · Microsoft+1 · Kernel32.Dll+1

Netjackal · Published 2007-08-24 · Updated 2017-09-29 · CVE-2007-4528

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP version 5.0.5

Description The issue allows context-dependent attackers to execute arbitrary code by loading an arbitrary DLL, such as kernel32.dll, and calling a function, for example, the WinExec function, due to the Foreign Function Interface (ffi) extension not following safe mode restrictions.

Recommendations For PHP version 5.0.5, consider disabling the Foreign Function Interface (ffi) extension as a temporary workaround until a patch is available. Restrict access to arbitrary DLLs to minimize the risk of exploitation. Avoid using the ffi extension to load and call functions from arbitrary DLLs until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2007-4528

Affected Products

Php

Kernel32.Dll

References · 4

• 🔥 https://exploit-db.com/exploits/4311 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-4528 · Security Note
• http://milw0rm.com/exploits/4311 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4528 · Note