CVE-2007-1889

Integer signedness error in the _zend_mm_alloc_int function in the Zend Memory Manager in PHP 5.2.0 allows remote attackers to execute arbitrary code via a large emalloc request, related to an incorrect signed long cast, as demonstrated via the HTTP SOAP client in PHP, and via a call to msg_receive with the largest positive integer value of maxsize.

• http://secunia.com/advisories/25056
• http://secunia.com/advisories/25062
• http://www.debian.org/security/2007/dsa-1283
• http://www.novell.com/linux/security/advisories/2007_32_php.html
• http://www.php-security.org/MOPB/MOPB-43-2007.htmlPatch, Vendor Advisory
• http://www.php-security.org/MOPB/MOPB-44-2007.htmlVendor Advisory
• http://www.securityfocus.com/bid/23238
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33770
• http://secunia.com/advisories/25056
• http://secunia.com/advisories/25062
• http://www.debian.org/security/2007/dsa-1283
• http://www.novell.com/linux/security/advisories/2007_32_php.html
• http://www.php-security.org/MOPB/MOPB-43-2007.htmlPatch, Vendor Advisory
• http://www.php-security.org/MOPB/MOPB-44-2007.htmlVendor Advisory
• http://www.securityfocus.com/bid/23238
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33770

Published

Apr 6, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-1883PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows conte…
• CVE-2007-1884Multiple integer signedness errors in the printf function fa…
• CVE-2007-1885Integer overflow in the str_replace function in PHP 4 before…
• CVE-2007-1886Integer overflow in the str_replace function in PHP 4.4.5 an…
• CVE-2007-1887Buffer overflow in the sqlite_decode_binary function in the …
• CVE-2007-1888Buffer overflow in the sqlite_decode_binary function in src/…
• CVE-2007-1890Integer overflow in the msg_receive function in PHP 4 before…
• CVE-2007-1891Stack-based buffer overflow in the GetPrivateProfileSectionW…
• CVE-2007-1892Stack-based buffer overflow in Akamai Technologies Download …
• CVE-2007-1893xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier…
• CVE-2007-1894Cross-site scripting (XSS) vulnerability in wp-includes/gene…
• CVE-2007-1895PHP remote file inclusion vulnerability in chat.php in Sky G…