← Back

CVE-2007-1883

nvd nist
Published: Apr 6, 2007Modified: Apr 23, 2026

JSON object

Loading...
7.8
Vector
AV:N/AC:L/Au:N/C:C/I:N/A:N
Exploitability: 10.0 / Impact: 6.9
Source: NVD

Description

PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent attackers to read arbitrary memory locations via an interruption that triggers a user space error handler that changes a parameter to an arbitrary pointer, as demonstrated via the iptcembed function, which calls certain convert_to_* functions with its input parameters.

Affected (67)

Products: Php: Php
1 product
Php
Configuration A
67 vulnerable
Vulnerable SoftwareAffected Versions
Php
Version 4.0.0
Version 4.0.1
Version 4.0.1 patch1
Version 4.0.1 patch2
Version 4.0.2
Version 4.0.3
Version 4.0.3 patch1
Version 4.0.4
Version 4.0.4 patch1
Version 4.0.5
Version 4.0.6
Version 4.0.7
Version 4.0.7 rc1
Version 4.0.7 rc2
Version 4.0.7 rc3
Version 4.1.0
Version 4.1.1
Version 4.1.2
Version 4.2.0
Version 4.2.1
Version 4.2.2
Version 4.2.3
Version 4.2
Version 4.3.0
Version 4.3.10
Version 4.3.11
Version 4.3.1
Version 4.3.2
Version 4.3.3
Version 4.3.4
Version 4.3.5
Version 4.3.6
Version 4.3.7
Version 4.3.8
Version 4.3.9
Version 4.4.0
Version 4.4.1
Version 4.4.2
Version 4.4.3
Version 4.4.4
Version 4.4.5
Version 4.4.6
Version 5.0.0
Version 5.0.0 beta1
Version 5.0.0 beta2
Version 5.0.0 beta3
Version 5.0.0 beta4
Version 5.0.0 rc1
Version 5.0.0 rc2
Version 5.0.0 rc3
Version 5.0.1
Version 5.0.2
Version 5.0.3
Version 5.0.4
Version 5.0.5
Version 5.0 rc1
Version 5.0 rc2
Version 5.0 rc3
Version 5.1.0
Version 5.1.1
Version 5.1.2
Version 5.1.3
Version 5.1.4
Version 5.1.5
Version 5.1.6
Version 5.2.0
Version 5.2.1

References (10)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
ExploitVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.