CVE-2007-0909

Published: Feb 13, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to (1) all of the *print functions on 64-bit systems, and (2) the odbc_result_all function.

Affected (77)

Products: Php: Php · Trustix: Secure Linux

1 product

1 product

Configuration A

75 vulnerable

Vulnerable Software	Affected Versions
Php Php	Version 3.0.10
Php Php	Version 3.0.11
Php Php	Version 3.0.12
Php Php	Version 3.0.13
Php Php	Version 3.0.14
Php Php	Version 3.0.15
Php Php	Version 3.0.16
Php Php	Version 3.0.17
Php Php	Version 3.0.18
Php Php	Version 3.0.1
Php Php	Version 3.0.2
Php Php	Version 3.0.3
Php Php	Version 3.0.4
Php Php	Version 3.0.5
Php Php	Version 3.0.6
Php Php	Version 3.0.7
Php Php	Version 3.0.8
Php Php	Version 3.0.9
Php Php	Version 3.0
Php Php	Version 4.0.1
Php Php	Version 4.0.1 patch1
Php Php	Version 4.0.1 patch2
Php Php	Version 4.0.2
Php Php	Version 4.0.3
Php Php	Version 4.0.3 patch1
Php Php	Version 4.0.4
Php Php	Version 4.0.5
Php Php	Version 4.0.6
Php Php	Version 4.0.7
Php Php	Version 4.0.7 rc1
Php Php	Version 4.0.7 rc2
Php Php	Version 4.0.7 rc3
Php Php	Version 4.0
Php Php	Version 4.1.0
Php Php	Version 4.1.1
Php Php	Version 4.1.2
Php Php	Version 4.2.0
Php Php	Version 4.2.1
Php Php	Version 4.2.2
Php Php	Version 4.2.3
Php Php	Version 4.2
Php Php	Version 4.3.0
Php Php	Version 4.3.10
Php Php	Version 4.3.11
Php Php	Version 4.3.1
Php Php	Version 4.3.2
Php Php	Version 4.3.3
Php Php	Version 4.3.4
Php Php	Version 4.3.5
Php Php	Version 4.3.6
Php Php	Version 4.3.7
Php Php	Version 4.3.8
Php Php	Version 4.3.9
Php Php	Version 4.4.0
Php Php	Version 4.4.1
Php Php	Version 4.4.2
Php Php	Version 4.4.3
Php Php	Version 4.4.4
Php Php	Version 5.0.0
Php Php	Version 5.0.1
Php Php	Version 5.0.2
Php Php	Version 5.0.3
Php Php	Version 5.0.4
Php Php	Version 5.0.5
Php Php	Version 5.0 rc1
Php Php	Version 5.0 rc2
Php Php	Version 5.0 rc3
Php Php	Version 5.1.0
Php Php	Version 5.1.1
Php Php	Version 5.1.2
Php Php	Version 5.1.3
Php Php	Version 5.1.4
Php Php	Version 5.1.5
Php Php	Version 5.1.6
Php Php	Version 5.2.0

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Trustix Secure Linux	Version 2.2
Trustix Secure Linux	Version 3.0

References (80)

ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc (unsafe URL)

Source: cve@mitre.org

http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html

Source: cve@mitre.org

http://osvdb.org/32764

Source: cve@mitre.org

http://osvdb.org/32765

Source: cve@mitre.org

http://rhn.redhat.com/errata/RHSA-2007-0089.html

Source: cve@mitre.org

http://secunia.com/advisories/24089

Source: cve@mitre.org

http://secunia.com/advisories/24195

Source: cve@mitre.org

http://secunia.com/advisories/24217

Source: cve@mitre.org

http://secunia.com/advisories/24236

Source: cve@mitre.org

http://secunia.com/advisories/24248

Source: cve@mitre.org

http://secunia.com/advisories/24284

Source: cve@mitre.org

http://secunia.com/advisories/24295

Source: cve@mitre.org

http://secunia.com/advisories/24322

Source: cve@mitre.org

http://secunia.com/advisories/24419

Source: cve@mitre.org

http://secunia.com/advisories/24421

Source: cve@mitre.org

http://secunia.com/advisories/24432

Source: cve@mitre.org

http://secunia.com/advisories/24514

Source: cve@mitre.org

http://secunia.com/advisories/24606

Source: cve@mitre.org

http://secunia.com/advisories/24642

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200703-21.xml

Source: cve@mitre.org

http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm

Source: cve@mitre.org

http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:048

Source: cve@mitre.org

http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html

Source: cve@mitre.org

http://www.php.net/ChangeLog-5.php#5.2.1

Source: cve@mitre.org

http://www.php.net/releases/5_2_1.php

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0076.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0081.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0082.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-0088.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/461462/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/22496

Source: cve@mitre.org

http://www.securitytracker.com/id?1017671

Source: cve@mitre.org

http://www.trustix.org/errata/2007/0009/

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-424-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-424-2

Source: cve@mitre.org

http://www.us.debian.org/security/2007/dsa-1264

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/0546

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-1088

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9722

Source: cve@mitre.org

ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc (unsafe URL)