Back to search
CVE-2007-1285
Published: Mar 6, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable destruction routines.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
https://launchpad.net/bugs/173043
x_refsource_CONFIRM
22764
vdb-entry
x_refsource_BID
RHSA-2007:0154
vendor-advisory
x_refsource_REDHAT
26048
third-party-advisory
x_refsource_SECUNIA
20070418 rPSA-2007-0073-1 php php-mysql php-pgsql
mailing-list
x_refsource_BUGTRAQ
GLSA-200705-19
vendor-advisory
x_refsource_GENTOO
24941
third-party-advisory
x_refsource_SECUNIA
27864
third-party-advisory
x_refsource_SECUNIA
RHSA-2007:0162
vendor-advisory
x_refsource_REDHAT
http://us2.php.net/releases/4_4_7.php
x_refsource_CONFIRM
http://www.php.net/releases/4_4_8.php
x_refsource_CONFIRM
SSA:2008-045-03
vendor-advisory
x_refsource_SLACKWARE
http://www.php.net/ChangeLog-5.php#5.2.4
x_refsource_CONFIRM
28936
third-party-advisory
x_refsource_SECUNIA
MDKSA-2007:090
vendor-advisory
x_refsource_MANDRIVA
http://www.php-security.org/MOPB/MOPB-03-2007.html
x_refsource_MISC
USN-549-1
vendor-advisory
x_refsource_UBUNTU
24909
third-party-advisory
x_refsource_SECUNIA
MDKSA-2007:087
vendor-advisory
x_refsource_MANDRIVA
24945
third-party-advisory
x_refsource_SECUNIA
oval:org.mitre.oval:def:11017
vdb-entry
signature
x_refsource_OVAL
https://issues.rpath.com/browse/RPL-1268
x_refsource_CONFIRM
32769
vdb-entry
x_refsource_OSVDB
http://us2.php.net/releases/5_2_2.php
x_refsource_CONFIRM
1017771
vdb-entry
x_refsource_SECTRACK
RHSA-2007:0082
vendor-advisory
x_refsource_REDHAT
24924
third-party-advisory
x_refsource_SECUNIA
RHSA-2007:0155
vendor-advisory
x_refsource_REDHAT
24910
third-party-advisory
x_refsource_SECUNIA
http://www.php.net/ChangeLog-4.php
x_refsource_CONFIRM
http://www.php.net/releases/5_2_4.php
x_refsource_CONFIRM
MDKSA-2007:089
vendor-advisory
x_refsource_MANDRIVA
25445
third-party-advisory
x_refsource_SECUNIA
RHSA-2007:0163
vendor-advisory
x_refsource_REDHAT
USN-549-2
vendor-advisory
x_refsource_UBUNTU
26642
third-party-advisory
x_refsource_SECUNIA
MDKSA-2007:088
vendor-advisory
x_refsource_MANDRIVA
SUSE-SA:2007:044
vendor-advisory
x_refsource_SUSE
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now