CVE-2007-2872

Published: Jun 4, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple integer overflows in the chunk_split function in PHP 5 before 5.2.3 and PHP 4 before 4.4.8 allow remote attackers to cause a denial of service (crash) or execute arbitrary code via the (1) chunks, (2) srclen, and (3) chunklen arguments.

Affected (17)

Products: Php: Php

Php

1 product

Php

Configuration A

17 vulnerable

Vulnerable Software	Affected Versions
Php Php	Up to 4.4.7
Php Php	Version 5.0.0
Php Php	Version 5.0.1
Php Php	Version 5.0.2
Php Php	Version 5.0.3
Php Php	Version 5.0.4
Php Php	Version 5.0.5
Php Php	Version 5.1.0
Php Php	Version 5.1.1
Php Php	Version 5.1.2
Php Php	Version 5.1.3
Php Php	Version 5.1.4
Php Php	Version 5.1.5
Php Php	Version 5.1.6
Php Php	Version 5.2.0
Php Php	Version 5.2.1
Php Php	Version 5.2.2

Related CWEs

CWE-189

References (116)

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795

Source: secalert@redhat.com

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01345501

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html

Source: secalert@redhat.com

http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html

Source: secalert@redhat.com

http://osvdb.org/36083

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2007-0889.html

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25456

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/25535

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/26048

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/26231

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/26838

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/26871

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/26895

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/26930

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/26967

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27037

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27102

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27110

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27351

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27377

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27545

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/27864

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28318

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28658

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/28750

Source: secalert@redhat.com

http://secunia.com/advisories/28936

Source: secalert@redhat.com

http://secunia.com/advisories/30040

Source: secalert@redhat.com

Vendor Advisory

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.482863

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.335136

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2007-449.htm

Source: secalert@redhat.com

http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:187

Source: secalert@redhat.com

http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.020.html

Source: secalert@redhat.com

http://www.php.net/ChangeLog-4.php

Source: secalert@redhat.com

http://www.php.net/releases/4_4_8.php

Source: secalert@redhat.com

http://www.php.net/releases/5_2_3.php

Source: secalert@redhat.com

Patch

http://www.redhat.com/support/errata/RHSA-2007-0888.html

Source: secalert@redhat.com

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2007-0890.html

Source: secalert@redhat.com

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2007-0891.html

Source: secalert@redhat.com

http://www.sec-consult.com/291.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/470244/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/491693/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/24261

Source: secalert@redhat.com

http://www.securitytracker.com/id?1018186

Source: secalert@redhat.com

http://www.trustix.org/errata/2007/0023/

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-549-2

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/2061

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/3386

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0059

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0398

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/39398

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-1693

Source: secalert@redhat.com

https://issues.rpath.com/browse/RPL-1702

Source: secalert@redhat.com

https://launchpad.net/bugs/173043

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9424

Source: secalert@redhat.com

https://usn.ubuntu.com/549-1/

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00354.html

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00397.html

Source: secalert@redhat.com

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795