CVE-2007-1889
Last modified
CVE-2007-1889 is a vulnerability of currently unknown severity. Integer signedness error in the _zend_mm_alloc_int function in the Zend Memory Manager in PHP 5.2.0 allows remote attackers to execute arbitrary code via a large emalloc request, related to an incorrect signed long cast, as demonstrated via the HTTP SOAP client in PHP, and via a call to msg_receive with the largest positive integer value of maxsize.. EPSS estimates a 3.09% chance of exploitation in the next 30 days.
Description
Integer signedness error in the _zend_mm_alloc_int function in the Zend Memory Manager in PHP 5.2.0 allows remote attackers to execute arbitrary code via a large emalloc request, related to an incorrect signed long cast, as demonstrated via the HTTP SOAP client in PHP, and via a call to msg_receive with the largest positive integer value of maxsize.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Php | Php | 5.2.0 |
References
- http://www.php-security.org/MOPB/MOPB-43-2007.htmlPatch, Vendor Advisory
- http://www.php-security.org/MOPB/MOPB-44-2007.htmlVendor Advisory
- http://www.php-security.org/MOPB/MOPB-43-2007.htmlPatch, Vendor Advisory
- http://www.php-security.org/MOPB/MOPB-44-2007.htmlVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-1889?
How severe is CVE-2007-1889?
How do I fix CVE-2007-1889?
Are you affected by CVE-2007-1889?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST