CVE

Id
24841  
CVE No.
CVE-2007-1484  
Status
Candidate  
Description
The array_user_key_compare function in PHP 4.4.6 and earlier, and 5.x up to 5.2.1, makes erroneous calls to zval_dtor, which triggers memory corruption and allows local users to bypass safe_mode and execute arbitrary code via a certain unset operation after array_user_key_compare has been called.  
Phase
Assigned (20070316)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
246099 24841 CVE-2007-1484 MISC:http://www.php-security.org/MOPB/MOPB-24-2007.html  View
246100 24841 CVE-2007-1484 CONFIRM:http://us2.php.net/releases/4_4_7.php  View
246101 24841 CVE-2007-1484 CONFIRM:http://us2.php.net/releases/5_2_2.php  View
246102 24841 CVE-2007-1484 CONFIRM:http://docs.info.apple.com/article.html?artnum=306172  View
246103 24841 CVE-2007-1484 APPLE:APPLE-SA-2007-07-31  View
246104 24841 CVE-2007-1484 URL:http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html  View
246105 24841 CVE-2007-1484 GENTOO:GLSA-200705-19  View
246106 24841 CVE-2007-1484 URL:http://security.gentoo.org/glsa/glsa-200705-19.xml  View
246107 24841 CVE-2007-1484 SUSE:SUSE-SA:2007:032  View
246108 24841 CVE-2007-1484 URL:http://www.novell.com/linux/security/advisories/2007_32_php.html  View
246109 24841 CVE-2007-1484 UBUNTU:USN-455-1  View
246110 24841 CVE-2007-1484 URL:http://www.ubuntu.com/usn/usn-455-1  View
246111 24841 CVE-2007-1484 BID:22990  View
246112 24841 CVE-2007-1484 URL:http://www.securityfocus.com/bid/22990  View
246113 24841 CVE-2007-1484 BID:25159  View
246114 24841 CVE-2007-1484 URL:http://www.securityfocus.com/bid/25159  View
246115 24841 CVE-2007-1484 VUPEN:ADV-2007-2732  View
246116 24841 CVE-2007-1484 URL:http://www.vupen.com/english/advisories/2007/2732  View
246117 24841 CVE-2007-1484 SECUNIA:24542  View
246118 24841 CVE-2007-1484 URL:http://secunia.com/advisories/24542  View
246119 24841 CVE-2007-1484 SECUNIA:25057  View
246120 24841 CVE-2007-1484 URL:http://secunia.com/advisories/25057  View
246121 24841 CVE-2007-1484 SECUNIA:25056  View
246122 24841 CVE-2007-1484 URL:http://secunia.com/advisories/25056  View
246123 24841 CVE-2007-1484 SECUNIA:25445  View
246124 24841 CVE-2007-1484 URL:http://secunia.com/advisories/25445  View
246125 24841 CVE-2007-1484 SECUNIA:26235  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53014 JVNDB-2007-001706 Carbonize Lazarus Guestbook の template.class.php における PHP リモートファイルインクルージョンの脆弱性 Carbonize Lazarus Guestbook の template.class.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-1486 24841 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001706.html  View