CVE-2007-2872

Опубликовано: 04 июн. 2007

Источник: nvd

CVSS2: 6.8

EPSS Средний

Описание

Multiple integer overflows in the chunk_split function in PHP 5 before 5.2.3 and PHP 4 before 4.4.8 allow remote attackers to cause a denial of service (crash) or execute arbitrary code via the (1) chunks, (2) srclen, and (3) chunklen arguments.

Ссылки

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01178795
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01345501
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01345501
http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html
http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html
http://osvdb.org/36083
http://rhn.redhat.com/errata/RHSA-2007-0889.html
Vendor Advisory
http://secunia.com/advisories/25456
Vendor Advisory
http://secunia.com/advisories/25535
Vendor Advisory
http://secunia.com/advisories/26048
Vendor Advisory
http://secunia.com/advisories/26231
Vendor Advisory
http://secunia.com/advisories/26838
Vendor Advisory
http://secunia.com/advisories/26871
Vendor Advisory
http://secunia.com/advisories/26895
Vendor Advisory
http://secunia.com/advisories/26930
Vendor Advisory
http://secunia.com/advisories/26967
Vendor Advisory
http://secunia.com/advisories/27037
Vendor Advisory
http://secunia.com/advisories/27102
Vendor Advisory
http://secunia.com/advisories/27110
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:php:php:*:*:*:*:*:*:*:*

Версия до 4.4.7 (включая)

cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*

cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*

cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*

cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*

cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*

cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*

cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*

cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*

cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*

cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*

cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*

cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*

cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*

cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*

cpe:2.3:a:php:php:5.2.2:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.12654

Средний

6.8 Medium

CVSS2

Дефекты

CWE-189

Связанные уязвимости

CVE-2007-2872

ubuntu

около 18 лет назад

CVE-2007-2872

redhat

около 18 лет назад

CVE-2007-2872

debian

около 18 лет назад

Multiple integer overflows in the chunk_split function in PHP 5 before ...

GHSA-vg29-wjx8-q6g3

github

около 3 лет назад

ELSA-2007-0890

oracle-oval

почти 18 лет назад

ELSA-2007-0890: Moderate: php security update (MODERATE)

EPSS

Процентиль: 94%

0.12654

Средний

6.8 Medium

CVSS2

Дефекты

CWE-189