CVE-2007-1864

Published: May 9, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has unknown impact and remote attack vectors.

Affected (10)

Products: Php: Php · Debian: Debian Linux · Canonical: Ubuntu Linux · +1 more

Show all products

Php: Php · Debian: Debian Linux · Canonical: Ubuntu Linux · Redhat: Enterprise Linux Server, Enterprise Linux Workstation

1 product

1 product

1 product

2 products

Enterprise Linux Server

Enterprise Linux Workstation

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Php Php	Before 4.4.7
Php Php	From 5.1.0 to 5.1.6
Php Php	From 5.2.0 to 5.2.2

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 3.1
Debian Debian Linux	Version 4.0

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 6.10
Canonical Ubuntu Linux	Version 7.04

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux Server	Version 5.0
Redhat Enterprise Linux Workstation	Version 5.0

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (60)

http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

http://osvdb.org/34674

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/25187

Source: secalert@redhat.com

Permissions RequiredThird Party Advisory

http://secunia.com/advisories/25191

Source: secalert@redhat.com

Permissions RequiredThird Party Advisory

http://secunia.com/advisories/25255

Source: secalert@redhat.com

Permissions RequiredThird Party Advisory

http://secunia.com/advisories/25445

Source: secalert@redhat.com

Permissions RequiredThird Party Advisory

http://secunia.com/advisories/25660

Source: secalert@redhat.com

Permissions RequiredThird Party Advisory

http://secunia.com/advisories/25938

Source: secalert@redhat.com

Permissions RequiredThird Party Advisory

http://secunia.com/advisories/25945

Source: secalert@redhat.com

Permissions RequiredThird Party Advisory

http://secunia.com/advisories/26048

Source: secalert@redhat.com

Permissions RequiredThird Party Advisory

http://secunia.com/advisories/26102

Source: secalert@redhat.com

Permissions RequiredThird Party Advisory

http://secunia.com/advisories/27377

Source: secalert@redhat.com

Permissions RequiredThird Party Advisory

http://security.gentoo.org/glsa/glsa-200705-19.xml

Source: secalert@redhat.com

Third Party Advisory

http://support.avaya.com/elmodocs2/security/ASA-2007-231.htm

Source: secalert@redhat.com

Third Party Advisory

http://us2.php.net/releases/4_4_7.php

Source: secalert@redhat.com

PatchVendor Advisory

http://us2.php.net/releases/5_2_2.php

Source: secalert@redhat.com

PatchVendor Advisory

http://www.debian.org/security/2007/dsa-1330

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2007/dsa-1331

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:102

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:103

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0349.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0355.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/bid/23813

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1018024

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.trustix.org/errata/2007/0017/

Source: secalert@redhat.com

Broken Link

http://www.ubuntu.com/usn/usn-485-1

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2007/2187

Source: secalert@redhat.com

Permissions RequiredThird Party Advisory

https://issues.rpath.com/browse/RPL-1693

Source: secalert@redhat.com

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11257

Source: secalert@redhat.com

Third Party Advisory

https://rhn.redhat.com/errata/RHSA-2007-0348.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html