CVE-2007-0988

Published: Feb 20, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attackers to cause a denial of service (infinite loop) by unserializing certain integer expressions, which only cause 32-bit arguments to be used after the check for a negative value, as demonstrated by an "a:2147483649:{" argument.

Affected (13)

Products: Php: Php · Canonical: Ubuntu Linux

1 product

1 product

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Php Php	From 4.0.0 to 4.4.5
Php Php	From 5.0.0 to 5.2.1
Php Php	Version 4.0
Php Php	Version 4.0 beta1
Php Php	Version 4.0 beta2
Php Php	Version 4.0 beta3
Php Php	Version 4.0 beta4
Php Php	Version 4.0 beta_4_patch1
Php Php	Version 4.0 rc1
Php Php	Version 4.0 rc2

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 5.10
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 6.10

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (90)

ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc (unsafe URL)

Source: cve@mitre.org

Broken Link

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=228858

Source: cve@mitre.org

Issue TrackingThird Party Advisory

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506

Source: cve@mitre.org

Broken Link

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137

Source: cve@mitre.org

Broken Link

http://osvdb.org/32762

Source: cve@mitre.org

Broken Link

http://rhn.redhat.com/errata/RHSA-2007-0089.html

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/24195

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/24217

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/24236

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/24248

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/24284

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/24295

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/24322

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/24419

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/24421

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/24432

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/24606

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/24642

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/25056

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/25423

Source: cve@mitre.org

Third Party Advisory

http://secunia.com/advisories/25850

Source: cve@mitre.org

Third Party Advisory

http://security.gentoo.org/glsa/glsa-200703-21.xml

Source: cve@mitre.org

Third Party Advisory

http://securityreason.com/securityalert/2315

Source: cve@mitre.org

Third Party Advisory

http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm

Source: cve@mitre.org

Third Party Advisory

http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm

Source: cve@mitre.org

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:048

Source: cve@mitre.org

Third Party Advisory

http://www.novell.com/linux/security/advisories/2007_32_php.html

Source: cve@mitre.org

Broken Link

http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html

Source: cve@mitre.org

Third Party Advisory

http://www.php-security.org/MOPB/MOPB-05-2007.html

Source: cve@mitre.org

Third Party Advisory

http://www.php.net/releases/5_2_1.php

Source: cve@mitre.org

PatchThird Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0076.html

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0081.html

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0082.html

Source: cve@mitre.org

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0088.html

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/archive/1/461462/100/0/threaded

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1017671

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.trustix.org/errata/2007/0009/

Source: cve@mitre.org

Broken Link

http://www.ubuntu.com/usn/usn-424-1

Source: cve@mitre.org

Third Party Advisory

http://www.ubuntu.com/usn/usn-424-2

Source: cve@mitre.org

Third Party Advisory

http://www.us.debian.org/security/2007/dsa-1264

Source: cve@mitre.org

Broken Link

http://www.vupen.com/english/advisories/2007/1991

Source: cve@mitre.org

Third Party Advisory

http://www.vupen.com/english/advisories/2007/2374

Source: cve@mitre.org

Third Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/32709

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://issues.rpath.com/browse/RPL-1088

Source: cve@mitre.org

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11092

Source: cve@mitre.org

Third Party Advisory

ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc (unsafe URL)