QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2007-1286

Back to search

CVE-2007-1286

Published: Mar 6, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unserialize function, which triggers the overflow in the ZVAL reference counter.

VendorProductVersions

n/a

n/a

affected
n/a

References

2007-0009
vendor-advisory
x_refsource_TRUSTIX
ADV-2007-1991
vdb-entry
x_refsource_VUPEN
DSA-1283
vendor-advisory
x_refsource_DEBIAN
SSRT071423
vendor-advisory
x_refsource_HP
24606
third-party-advisory
x_refsource_SECUNIA
RHSA-2007:0154
vendor-advisory
x_refsource_REDHAT
GLSA-200705-19
vendor-advisory
x_refsource_GENTOO
24941
third-party-advisory
x_refsource_SECUNIA
HPSBTU02232
vendor-advisory
x_refsource_HP
GLSA-200703-21
vendor-advisory
x_refsource_GENTOO
php-zval-code-execution(32796)
vdb-entry
x_refsource_XF
SSRT071429
vendor-advisory
x_refsource_HP
25062
third-party-advisory
x_refsource_SECUNIA
ADV-2007-2374
vdb-entry
x_refsource_VUPEN
25423
third-party-advisory
x_refsource_SECUNIA
24419
third-party-advisory
x_refsource_SECUNIA
MDKSA-2007:087
vendor-advisory
x_refsource_MANDRIVA
24945
third-party-advisory
x_refsource_SECUNIA
DSA-1282
vendor-advisory
x_refsource_DEBIAN
HPSBMA02215
vendor-advisory
x_refsource_HP
24924
third-party-advisory
x_refsource_SECUNIA
RHSA-2007:0155
vendor-advisory
x_refsource_REDHAT
24910
third-party-advisory
x_refsource_SECUNIA
25850
third-party-advisory
x_refsource_SECUNIA
25445
third-party-advisory
x_refsource_SECUNIA
RHSA-2007:0163
vendor-advisory
x_refsource_REDHAT
oval:org.mitre.oval:def:11575
vdb-entry
signature
x_refsource_OVAL
22765
vdb-entry
x_refsource_BID
25025
third-party-advisory
x_refsource_SECUNIA
32771
vdb-entry
x_refsource_OSVDB
MDKSA-2007:088
vendor-advisory
x_refsource_MANDRIVA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now