PT-2007-6662 · Php · Php

Shinnai · Published 2007-10-23 · Updated 2017-09-29 · CVE-2007-5653

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions PHP versions 5.x

Description The issue allows context-dependent attackers to bypass intended limitations in the Component Object Model (COM) functions. This can be demonstrated by executing objects with the kill bit set in the corresponding ActiveX control Compatibility Flags, executing programs via a function in compatUI.dll, invoking wscript.shell via wscript.exe, invoking Scripting.FileSystemObject via wshom.ocx, and adding users via a function in shgina.dll. This is related to the com load typelib function.

Recommendations For PHP version 5.x, consider disabling the com load typelib function as a temporary workaround until a patch is available. Restrict access to the COM functions to minimize the risk of exploitation. Avoid using the COM functions to execute objects or invoke external programs until the issue is resolved.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2007-5653

Affected Products

Php

References · 9

• 🔥 https://exploit-db.com/exploits/4553 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-5653 · Security Note
• http://frsirt.com/english/advisories/2007/3590 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5653 · Note
• http://secunia.com/advisories/27280 · Note
• http://milw0rm.com/exploits/4553 · Note
• http://vupen.com/english/advisories/2007/3590 · Note
• http://xforce.iss.net/xforce/xfdb/37368 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37368 · Note