CVE

Id
28140  
CVE No.
CVE-2007-4783  
Status
Candidate  
Description
The iconv_substr function in PHP 5.2.4 and earlier allows context-dependent attackers to cause (1) a denial of service (application crash) via a long string in the charset parameter, probably also requiring a long string in the str parameter; or (2) a denial of service (temporary application hang) via a long string in the str parameter. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.  
Phase
Assigned (20070910)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
291909 28140 CVE-2007-4783 BUGTRAQ:20070905 PHP <=5.2.4 iconv_substr() denial of service  View
291910 28140 CVE-2007-4783 URL:http://www.securityfocus.com/archive/1/archive/1/478637/100/0/threaded  View
291911 28140 CVE-2007-4783 CONFIRM:https://issues.rpath.com/browse/RPL-1943  View
291912 28140 CVE-2007-4783 CONFIRM:http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0242  View
291913 28140 CVE-2007-4783 GENTOO:GLSA-200710-02  View
291914 28140 CVE-2007-4783 URL:http://www.gentoo.org/security/en/glsa/glsa-200710-02.xml  View
291915 28140 CVE-2007-4783 HP:HPSBUX02332  View
291916 28140 CVE-2007-4783 URL:http://www.securityfocus.com/archive/1/archive/1/491693/100/0/threaded  View
291917 28140 CVE-2007-4783 HP:SSRT080056  View
291918 28140 CVE-2007-4783 URL:http://www.securityfocus.com/archive/1/archive/1/491693/100/0/threaded  View
291919 28140 CVE-2007-4783 OSVDB:38917  View
291920 28140 CVE-2007-4783 URL:http://osvdb.org/38917  View
291921 28140 CVE-2007-4783 SECUNIA:27102  View
291922 28140 CVE-2007-4783 URL:http://secunia.com/advisories/27102  View
291923 28140 CVE-2007-4783 SECUNIA:27659  View
291924 28140 CVE-2007-4783 URL:http://secunia.com/advisories/27659  View
291925 28140 CVE-2007-4783 SECUNIA:30040  View
291926 28140 CVE-2007-4783 URL:http://secunia.com/advisories/30040  View
291927 28140 CVE-2007-4783 SREASON:3115  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52015 JVNDB-2007-000678 ソニー製指紋認証機能つき「ポケットビット」付属ソフトウェアにおける脆弱性 ソニー製 USB メモリ「ポケットビット」のうち指紋認証機能つきの製品に付属のソフトウェアには、フォルダを不可視にするプログラムが含まれています。 CVE-2007-4785 28140 2.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000678.html  View