CVE-2007-1285

Published: Mar 6, 2007Modified: Apr 23, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable destruction routines.

Affected (15)

Products: Php: Php · Canonical: Ubuntu Linux · Novell: Suse Linux · +2 more

Show all products

Php: Php · Canonical: Ubuntu Linux · Novell: Suse Linux · Suse: Linux Enterprise Server · Redhat: Enterprise Linux Desktop, Enterprise Linux Server, Enterprise Linux Workstation

1 product

1 product

1 product

1 product

Linux Enterprise Server

Redhat

3 products

Enterprise Linux Desktop

Enterprise Linux Server

Enterprise Linux Workstation

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Php Php	From 4.0.0 to 4.4.7
Php Php	From 5.0.0 to 5.2.2

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 7.10

Configuration C

4 vulnerable

Vulnerable Software	Affected Versions
Novell Suse Linux	Version 10.0
Novell Suse Linux	Version 10.1
Suse Linux Enterprise Server	Version 10 sp1
Suse Linux Enterprise Server	Version 8

Configuration D

8 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Desktop	Version 3.0
Redhat Enterprise Linux Desktop	Version 4.0
Redhat Enterprise Linux Server	Version 2.0
Redhat Enterprise Linux Server	Version 3.0
Redhat Enterprise Linux Server	Version 4.0
Redhat Enterprise Linux Workstation	Version 2.0
Redhat Enterprise Linux Workstation	Version 3.0
Redhat Enterprise Linux Workstation	Version 4.0

Related CWEs

CWE-674

Uncontrolled Recursion

The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.

References (76)

http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html

Source: cve@mitre.org

Mailing List

http://rhn.redhat.com/errata/RHSA-2007-0154.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2007-0155.html

Source: cve@mitre.org

Third Party Advisory

http://rhn.redhat.com/errata/RHSA-2007-0163.html

Source: cve@mitre.org

Broken Link

http://secunia.com/advisories/24909

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/24910

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/24924

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/24941

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/24945

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/25445

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/26048

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/26642

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/27864

Source: cve@mitre.org

Broken LinkVendor Advisory

http://secunia.com/advisories/28936

Source: cve@mitre.org

Broken LinkVendor Advisory

http://security.gentoo.org/glsa/glsa-200705-19.xml

Source: cve@mitre.org

Third Party Advisory

http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.335136

Source: cve@mitre.org

Broken Link

http://us2.php.net/releases/4_4_7.php

Source: cve@mitre.org

Release Notes

http://us2.php.net/releases/5_2_2.php

Source: cve@mitre.org

Release Notes

http://www.mandriva.com/security/advisories?name=MDKSA-2007:087

Source: cve@mitre.org

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:088

Source: cve@mitre.org

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:089

Source: cve@mitre.org

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:090

Source: cve@mitre.org

Third Party Advisory

http://www.osvdb.org/32769

Source: cve@mitre.org

Broken Link

http://www.php-security.org/MOPB/MOPB-03-2007.html

Source: cve@mitre.org

Broken LinkExploitVendor Advisory

http://www.php.net/ChangeLog-4.php

Source: cve@mitre.org

Release Notes

http://www.php.net/ChangeLog-5.php#5.2.4

Source: cve@mitre.org

Release Notes

http://www.php.net/releases/4_4_8.php

Source: cve@mitre.org

Release Notes

http://www.php.net/releases/5_2_4.php

Source: cve@mitre.org

Release Notes

http://www.redhat.com/support/errata/RHSA-2007-0082.html

Source: cve@mitre.org

Broken Link

http://www.redhat.com/support/errata/RHSA-2007-0162.html

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/archive/1/466166/100/0/threaded

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/22764

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1017771

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

http://www.ubuntu.com/usn/usn-549-2

Source: cve@mitre.org

Third Party Advisory

https://issues.rpath.com/browse/RPL-1268

Source: cve@mitre.org

Broken Link

https://launchpad.net/bugs/173043

Source: cve@mitre.org

ExploitIssue Tracking

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11017

Source: cve@mitre.org

Broken Link

https://usn.ubuntu.com/549-1/

Source: cve@mitre.org

Broken Link

http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html