QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2007-4661

Back to search

CVE-2007-4661

Published: Sep 4, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

The chunk_split function in string.c in PHP 5.2.3 does not properly calculate the needed buffer size due to precision loss when performing integer arithmetic with floating point numbers, which has unknown attack vectors and impact, possibly resulting in a heap-based buffer overflow. NOTE: this is due to an incomplete fix for CVE-2007-2872.

VendorProductVersions

n/a

n/a

affected
n/a

References

SUSE-SA:2008:004
vendor-advisory
x_refsource_SUSE
28658
third-party-advisory
x_refsource_SECUNIA
GLSA-200710-02
vendor-advisory
x_refsource_GENTOO
27864
third-party-advisory
x_refsource_SECUNIA
USN-549-1
vendor-advisory
x_refsource_UBUNTU
26838
third-party-advisory
x_refsource_SECUNIA
27102
third-party-advisory
x_refsource_SECUNIA
USN-549-2
vendor-advisory
x_refsource_UBUNTU
26642
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now