NVD

Id
53200  
Name
CVE-2007-0988  
Description
The zend_hash_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attackers to cause a denial of service (infinite loop) by unserializing certain integer expressions, which only cause 32-bit arguments to be used after the check for a negative value, as demonstrated by an "a:2147483649:{" argument.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2007-02-20  
Modified Date
2011-05-25  
Seq
2007-0988  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
269208 53200 CVE-2007-0988 20070201-01-P  View
269209 53200 CVE-2007-0988 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=228858  View
269210 53200 CVE-2007-0988 HPSBMA02215  View
269211 53200 CVE-2007-0988 SSRT071429  View
269212 53200 CVE-2007-0988 oval:org.mitre.oval:def:11092  View
269213 53200 CVE-2007-0988 RHSA-2007:0089  View
269214 53200 CVE-2007-0988 GLSA-200703-21  View
269215 53200 CVE-2007-0988 2315  View
269216 53200 CVE-2007-0988 http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm  View
269217 53200 CVE-2007-0988 http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm  View
269218 53200 CVE-2007-0988 MDKSA-2007:048  View
269219 53200 CVE-2007-0988 SUSE-SA:2007:032  View
269220 53200 CVE-2007-0988 OpenPKG-SA-2007.010  View
269221 53200 CVE-2007-0988 http://www.php-security.org/MOPB/MOPB-05-2007.html  View
269222 53200 CVE-2007-0988 http://www.php.net/releases/5_2_1.php  View
269223 53200 CVE-2007-0988 RHSA-2007:0076  View
269224 53200 CVE-2007-0988 RHSA-2007:0081  View
269225 53200 CVE-2007-0988 RHSA-2007:0082  View
269226 53200 CVE-2007-0988 RHSA-2007:0088  View
269227 53200 CVE-2007-0988 20070227 rPSA-2007-0043-1 php php-mysql php-pgsql  View
269228 53200 CVE-2007-0988 1017671  View
269229 53200 CVE-2007-0988 2007-0009  View
269230 53200 CVE-2007-0988 USN-424-1  View
269231 53200 CVE-2007-0988 USN-424-2  View
269232 53200 CVE-2007-0988 DSA-1264  View
269233 53200 CVE-2007-0988 ADV-2007-1991  View
269234 53200 CVE-2007-0988 ADV-2007-2374  View
269235 53200 CVE-2007-0988 php-zendhashinit-dos(32709)  View
269236 53200 CVE-2007-0988 https://issues.rpath.com/browse/RPL-1088  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51507 JVNDB-2007-000169 PHP の zend_hash_init() 関数におけるサービス運用妨害 (DoS) の脆弱性 PHP の zend_hash_init() 関数には、64-bit プラットフォーム上で動作している際に、シリアル化されていない不正なデータを扱うことで無限ループが発生し、CPU リソースを消費してしまう問題が存在します。 CVE-2007-0988 24343 CVE-2007-0988 53200 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000169.html 2007-02-20 2007-05-30 View