PT-2007-5747 · Microsoft+1 · Iis+1

Boecke · Published 2007-08-28 · Updated 2017-09-29 · CVE-2007-4586

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.2.0

Description The issue is related to multiple buffer overflows in the iisfunc extension, specifically in the php iisfunc.dll file. This allows context-dependent attackers to execute arbitrary code, likely during Unicode conversion. The vulnerability can be triggered by a long string in the first argument to the iis getservicestate function, and is also related to the ServiceId argument in functions such as fnStartService, fnGetServiceState, and fnStopService.

Recommendations For PHP versions prior to 5.2.0, update to a version that is 5.2.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the iisfunc extension or limiting the input to the iis getservicestate function and related functions to prevent exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-4586

Affected Products

Iis

Php

References · 7

• 🔥 https://exploit-db.com/exploits/4318 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-4586 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36262 · Note
• http://securityfocus.com/bid/25452 · Note
• http://milw0rm.com/exploits/4318 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4586 · Note
• http://xforce.iss.net/xforce/xfdb/36262 · Note