Back to search
CVE-2007-0988
Published: Feb 20, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attackers to cause a denial of service (infinite loop) by unserializing certain integer expressions, which only cause 32-bit arguments to be used after the check for a negative value, as demonstrated by an "a:2147483649:{" argument.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
DSA-1264
vendor-advisory
x_refsource_DEBIAN
24295
third-party-advisory
x_refsource_SECUNIA
2007-0009
vendor-advisory
x_refsource_TRUSTIX
OpenPKG-SA-2007.010
vendor-advisory
x_refsource_OPENPKG
24195
third-party-advisory
x_refsource_SECUNIA
ADV-2007-1991
vdb-entry
x_refsource_VUPEN
25056
third-party-advisory
x_refsource_SECUNIA
1017671
vdb-entry
x_refsource_SECTRACK
http://www.php-security.org/MOPB/MOPB-05-2007.html
x_refsource_MISC
SSRT071423
vendor-advisory
x_refsource_HP
http://www.php.net/releases/5_2_1.php
x_refsource_MISC
24606
third-party-advisory
x_refsource_SECUNIA
2315
third-party-advisory
x_refsource_SREASON
24642
third-party-advisory
x_refsource_SECUNIA
php-zendhashinit-dos(32709)
vdb-entry
x_refsource_XF
24217
third-party-advisory
x_refsource_SECUNIA
http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm
x_refsource_CONFIRM
24248
third-party-advisory
x_refsource_SECUNIA
HPSBTU02232
vendor-advisory
x_refsource_HP
https://issues.rpath.com/browse/RPL-1088
x_refsource_CONFIRM
oval:org.mitre.oval:def:11092
vdb-entry
signature
x_refsource_OVAL
24284
third-party-advisory
x_refsource_SECUNIA
USN-424-2
vendor-advisory
x_refsource_UBUNTU
32762
vdb-entry
x_refsource_OSVDB
GLSA-200703-21
vendor-advisory
x_refsource_GENTOO
SSRT071429
vendor-advisory
x_refsource_HP
24432
third-party-advisory
x_refsource_SECUNIA
24421
third-party-advisory
x_refsource_SECUNIA
ADV-2007-2374
vdb-entry
x_refsource_VUPEN
25423
third-party-advisory
x_refsource_SECUNIA
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=228858
x_refsource_MISC
RHSA-2007:0076
vendor-advisory
x_refsource_REDHAT
24419
third-party-advisory
x_refsource_SECUNIA
RHSA-2007:0089
vendor-advisory
x_refsource_REDHAT
RHSA-2007:0088
vendor-advisory
x_refsource_REDHAT
20070227 rPSA-2007-0043-1 php php-mysql php-pgsql
mailing-list
x_refsource_BUGTRAQ
http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm
x_refsource_CONFIRM
HPSBMA02215
vendor-advisory
x_refsource_HP
RHSA-2007:0082
vendor-advisory
x_refsource_REDHAT
25850
third-party-advisory
x_refsource_SECUNIA
MDKSA-2007:048
vendor-advisory
x_refsource_MANDRIVA
SUSE-SA:2007:032
vendor-advisory
x_refsource_SUSE
USN-424-1
vendor-advisory
x_refsource_UBUNTU
RHSA-2007:0081
vendor-advisory
x_refsource_REDHAT
24322
third-party-advisory
x_refsource_SECUNIA
24236
third-party-advisory
x_refsource_SECUNIA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now