CVE-2007-0908

Published: Feb 13, 2007Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize the key_length variable for a numerical key, which allows context-dependent attackers to read stack memory via a wddxPacket element that contains a variable with a string name before a numerical variable.

Affected (13)

Products: Php: Php · Canonical: Ubuntu Linux

1 product

1 product

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Php Php	From 4.0.0 to 4.4.5
Php Php	From 5.0.0 to 5.2.1
Php Php	Version 4.0
Php Php	Version 4.0 beta1
Php Php	Version 4.0 beta2
Php Php	Version 4.0 beta3
Php Php	Version 4.0 beta4
Php Php	Version 4.0 beta_4_patch1
Php Php	Version 4.0 rc1
Php Php	Version 4.0 rc2

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 5.10
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 6.10

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (86)

ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc (unsafe URL)

Source: cve@mitre.org

Broken Link

http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html

Source: cve@mitre.org

Broken Link

http://osvdb.org/32766

Source: cve@mitre.org

Broken Link

http://rhn.redhat.com/errata/RHSA-2007-0089.html

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/24089

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/24195

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/24217

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/24236

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/24248

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/24284

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/24295

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/24322

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/24419

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/24421

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/24432

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/24514

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/24606

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/24642

Source: cve@mitre.org

Third Party Advisory

http://security.gentoo.org/glsa/glsa-200703-21.xml

Source: cve@mitre.org

Third Party Advisory

http://securityreason.com/securityalert/2321

Source: cve@mitre.org

Third Party Advisory

http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm

Source: cve@mitre.org

Third Party Advisory

http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm

Source: cve@mitre.org

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:048

Source: cve@mitre.org

Third Party Advisory

http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html

Source: cve@mitre.org

Third Party Advisory

http://www.php-security.org/MOPB/MOPB-11-2007.html

Source: cve@mitre.org

Third Party Advisory

http://www.php.net/ChangeLog-5.php#5.2.1

Source: cve@mitre.org

Third Party Advisory

http://www.php.net/releases/5_2_1.php

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0076.html

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0081.html

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0082.html

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0088.html

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/archive/1/461462/100/0/threaded

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/22496

Source: cve@mitre.org

PatchThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/22806

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1017671

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.trustix.org/errata/2007/0009/

Source: cve@mitre.org

Broken Link

http://www.ubuntu.com/usn/usn-424-1

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/usn-424-2

Source: cve@mitre.org

Third Party Advisory

http://www.us.debian.org/security/2007/dsa-1264

Source: cve@mitre.org

Broken Link

http://www.vupen.com/english/advisories/2007/0546

Source: cve@mitre.org

Permissions RequiredThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/32493

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://issues.rpath.com/browse/RPL-1088

Source: cve@mitre.org

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11185

Source: cve@mitre.org

Third Party Advisory

ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc (unsafe URL)