CVE-2007-1285

Опубликовано: 06 мар. 2007

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable destruction routines.

Ссылки

http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html
Mailing List
http://rhn.redhat.com/errata/RHSA-2007-0154.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2007-0155.html
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2007-0163.html
Broken Link
http://secunia.com/advisories/24909
Broken Link
Vendor Advisory
http://secunia.com/advisories/24910
Broken Link
Vendor Advisory
http://secunia.com/advisories/24924
Broken Link
Vendor Advisory
http://secunia.com/advisories/24941
Broken Link
Vendor Advisory
http://secunia.com/advisories/24945
Broken Link
Vendor Advisory
http://secunia.com/advisories/25445
Broken Link
Vendor Advisory
http://secunia.com/advisories/26048
Broken Link
Vendor Advisory
http://secunia.com/advisories/26642
Broken Link
Vendor Advisory
http://secunia.com/advisories/27864
Broken Link
Vendor Advisory
http://secunia.com/advisories/28936
Broken Link
Vendor Advisory
http://security.gentoo.org/glsa/glsa-200705-19.xml
Third Party Advisory
http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.335136
Broken Link
http://us2.php.net/releases/4_4_7.php
Release Notes
http://us2.php.net/releases/5_2_2.php
Release Notes
http://www.mandriva.com/security/advisories?name=MDKSA-2007:087
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:088
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:php:php:*:*:*:*:*:*:*:*

Версия от 4.0.0 (включая) до 4.4.7 (исключая)

cpe:2.3:a:php:php:*:*:*:*:*:*:*:*

Версия от 5.0.0 (включая) до 5.2.2 (исключая)

Конфигурация 2

cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:novell:suse_linux:10.0:*:*:*:*:*:*:*

cpe:2.3:o:novell:suse_linux:10.1:*:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:8:*:*:*:*:*:*:*

cpe:2.3:o:suse:linux_enterprise_server:10:sp1:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:2.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:3.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:4.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:2.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:3.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:4.0:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.08367

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-674

Связанные уязвимости

CVE-2007-1285

CVSS3: 7.5

ubuntu

больше 18 лет назад

CVE-2007-1285

redhat

больше 18 лет назад

CVE-2007-1285

CVSS3: 7.5

debian

больше 18 лет назад

The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows ...

GHSA-jhxw-fqxp-j75j

CVSS3: 7.5

github

около 3 лет назад

EPSS

Процентиль: 92%

0.08367

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-674