NVD

Id
53123  
Name
CVE-2007-0908  
Description
The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize the key_length variable for a numerical key, which allows context-dependent attackers to read stack memory via a wddxPacket element that contains a variable with a string name before a numerical variable.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-02-13  
Modified Date
2011-06-06  
Seq
2007-0908  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
268680 53123 CVE-2007-0908 20070201-01-P  View
268681 53123 CVE-2007-0908 SUSE-SA:2007:020  View
268682 53123 CVE-2007-0908 oval:org.mitre.oval:def:11185  View
268683 53123 CVE-2007-0908 RHSA-2007:0089  View
268684 53123 CVE-2007-0908 GLSA-200703-21  View
268685 53123 CVE-2007-0908 2321  View
268686 53123 CVE-2007-0908 http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm  View
268687 53123 CVE-2007-0908 http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm  View
268688 53123 CVE-2007-0908 MDKSA-2007:048  View
268689 53123 CVE-2007-0908 OpenPKG-SA-2007.010  View
268690 53123 CVE-2007-0908 http://www.php-security.org/MOPB/MOPB-11-2007.html  View
268691 53123 CVE-2007-0908 http://www.php.net/ChangeLog-5.php#5.2.1  View
268692 53123 CVE-2007-0908 http://www.php.net/releases/5_2_1.php  View
268693 53123 CVE-2007-0908 RHSA-2007:0076  View
268694 53123 CVE-2007-0908 RHSA-2007:0081  View
268695 53123 CVE-2007-0908 RHSA-2007:0082  View
268696 53123 CVE-2007-0908 RHSA-2007:0088  View
268697 53123 CVE-2007-0908 20070227 rPSA-2007-0043-1 php php-mysql php-pgsql  View
268698 53123 CVE-2007-0908 22496  View
268699 53123 CVE-2007-0908 22806  View
268700 53123 CVE-2007-0908 1017671  View
268701 53123 CVE-2007-0908 2007-0009  View
268702 53123 CVE-2007-0908 USN-424-1  View
268703 53123 CVE-2007-0908 USN-424-2  View
268704 53123 CVE-2007-0908 DSA-1264  View
268705 53123 CVE-2007-0908 ADV-2007-0546  View
268706 53123 CVE-2007-0908 php-wddx-information-disclosure(32493)  View
268707 53123 CVE-2007-0908 https://issues.rpath.com/browse/RPL-1088  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51471 JVNDB-2007-000133 PHP の wddx エクステンションにおける情報漏洩の脆弱性 PHP には、wddx エクステンションにおいて情報漏えいを引き起こす脆弱性が存在します。 CVE-2007-0908 24263 CVE-2007-0908 53123 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000133.html 2007-02-09 2007-05-30 View