QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2007-1711

Back to search

CVE-2007-1711

Published: Mar 27, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbitrary code by overwriting variables pointing to (1) the GLOBALS array or (2) the session data in _SESSION. NOTE: this issue was introduced when attempting to patch CVE-2007-1701 (MOPB-31-2007).

VendorProductVersions

n/a

n/a

affected
n/a

References

ADV-2007-2732
vdb-entry
x_refsource_VUPEN
23121
vdb-entry
x_refsource_BID
DSA-1283
vendor-advisory
x_refsource_DEBIAN
RHSA-2007:0154
vendor-advisory
x_refsource_REDHAT
APPLE-SA-2007-07-31
vendor-advisory
x_refsource_APPLE
GLSA-200705-19
vendor-advisory
x_refsource_GENTOO
24941
third-party-advisory
x_refsource_SECUNIA
25062
third-party-advisory
x_refsource_SECUNIA
oval:org.mitre.oval:def:10406
vdb-entry
signature
x_refsource_OVAL
MDKSA-2007:087
vendor-advisory
x_refsource_MANDRIVA
24945
third-party-advisory
x_refsource_SECUNIA
DSA-1282
vendor-advisory
x_refsource_DEBIAN
24924
third-party-advisory
x_refsource_SECUNIA
RHSA-2007:0155
vendor-advisory
x_refsource_REDHAT
24910
third-party-advisory
x_refsource_SECUNIA
25159
vdb-entry
x_refsource_BID
25445
third-party-advisory
x_refsource_SECUNIA
RHSA-2007:0163
vendor-advisory
x_refsource_REDHAT
25025
third-party-advisory
x_refsource_SECUNIA
MDKSA-2007:088
vendor-advisory
x_refsource_MANDRIVA
26235
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now