QwikSec

Security Database

CVE

CWE

Training

CVE-2007-1453

Published: Mar 14, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Buffer underflow in the PHP_FILTER_TRIM_DEFAULT macro in the filtering extension (ext/filter) in PHP 5.2.0 allows context-dependent attackers to execute arbitrary code by calling filter_var with certain modes such as FILTER_VALIDATE_INT, which causes filter to write a null byte in whitespace that precedes the buffer.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

third-party-advisory

x_refsource_SECUNIA

vendor-advisory

x_refsource_DEBIAN

http://www.php.net/releases/5_2_1.php

x_refsource_MISC

vdb-entry

x_refsource_BID

http://www.php-security.org/MOPB/MOPB-19-2007.html

x_refsource_MISC

third-party-advisory

x_refsource_SECUNIA

SUSE-SA:2007:032

vendor-advisory

x_refsource_SUSE

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.