CVE

Id
25066  
CVE No.
CVE-2007-1709  
Status
Candidate  
Description
Buffer overflow in the confirm_phpdoc_compiled function in the phpDOC extension (PECL phpDOC) in PHP 5.2.1 allows context-dependent attackers to execute arbitrary code via a long argument string.  
Phase
Assigned (20070326)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
249297 25066 CVE-2007-1709 BUGTRAQ:20070325 PHP 5.2.1 with PECL phpDOC local buffer overflow  View
249298 25066 CVE-2007-1709 URL:http://www.securityfocus.com/archive/1/archive/1/463843/100/0/threaded  View
249299 25066 CVE-2007-1709 MILW0RM:3576  View
249300 25066 CVE-2007-1709 URL:http://www.milw0rm.com/exploits/3576  View
249301 25066 CVE-2007-1709 MISC:http://retrogod.altervista.org/php521_phpdoc_bof.html  View
249302 25066 CVE-2007-1709 BID:23124  View
249303 25066 CVE-2007-1709 URL:http://www.securityfocus.com/bid/23124  View
249304 25066 CVE-2007-1709 SREASON:2512  View
249305 25066 CVE-2007-1709 URL:http://securityreason.com/securityalert/2512  View
249306 25066 CVE-2007-1709 XF:phpdoc-confirmcompiled-bo(33236)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51602 JVNDB-2007-000264 PHP の session_decode() 関数におけるメモリ二重解放の脆弱性 PHP のアンシリアライザに不備が存在するため、session_decode() 関数で不正な文字列を処理した場合に、メモリの二重解放が発生する脆弱性が存在します。 CVE-2007-1711 25066 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000264.html  View