CVE-2007-4887

Published: Sep 14, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The dl function in PHP 5.2.4 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long string in the library parameter. NOTE: there are limited usage scenarios under which this would be a vulnerability.

Affected (1)

Products: Php: Php

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Php Php	Up to 5.2.4

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (44)

http://docs.info.apple.com/article.html?artnum=307562

Source: cve@mitre.org

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01345501

Source: cve@mitre.org

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Source: cve@mitre.org

http://secunia.com/advisories/27102

Source: cve@mitre.org

http://secunia.com/advisories/27659

Source: cve@mitre.org

http://secunia.com/advisories/28750

Source: cve@mitre.org

http://secunia.com/advisories/29420

Source: cve@mitre.org

http://secunia.com/advisories/30040

Source: cve@mitre.org

http://securityreason.com/securityalert/3133

Source: cve@mitre.org

http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0242

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml

Source: cve@mitre.org

http://www.php.net/ChangeLog-5.php#5.2.5

Source: cve@mitre.org

http://www.php.net/releases/5_2_5.php

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/478985/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/478988/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/491693/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/26403

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/3825

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/0398

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/0924/references

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-1943

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5767

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=307562

Source: af854a3a-2127-422b-91ae-364da2661108

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01345501

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27102

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27659

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/28750

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/29420

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/30040

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/3133

Source: af854a3a-2127-422b-91ae-364da2661108

http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0242

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.php.net/ChangeLog-5.php#5.2.5

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.php.net/releases/5_2_5.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/478985/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/478988/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/491693/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/26403

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/3825

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/0398

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/0924/references

Source: af854a3a-2127-422b-91ae-364da2661108

https://issues.rpath.com/browse/RPL-1943

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5767

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.