NVD

Id
53561  
Name
CVE-2007-1376  
Description
The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that their arguments correspond to a shmop resource, which allows context-dependent attackers to read and write arbitrary memory locations via arguments associated with an inappropriate resource, as demonstrated by a GD Image resource.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-03-09  
Modified Date
2008-09-05  
Seq
2007-1376  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
271413 53561 CVE-2007-1376 GLSA-200703-21  View
271414 53561 CVE-2007-1376 DSA-1283  View
271415 53561 CVE-2007-1376 3426  View
271416 53561 CVE-2007-1376 3427  View
271417 53561 CVE-2007-1376 SUSE-SA:2007:032  View
271418 53561 CVE-2007-1376 http://www.php-security.org/MOPB/MOPB-15-2007.html  View
271419 53561 CVE-2007-1376 22862  View
271420 53561 CVE-2007-1376 USN-455-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54788 JVNDB-2007-003480 PHP の shmop 関数における任意のメモリ領域に書き込まれる脆弱性 PHP の shmop 関数は、shmop リソースへ対応するそれぞれの引数を確認しないため、任意のメモリ領域を読まれる、および書き込まれる脆弱性が存在します。 CVE-2007-1376 24731 CVE-2007-1376 53561 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003480.html 2007-03-08 2012-09-25 View