NVD

Id
53705  
Name
CVE-2007-1521  
Description
Double free vulnerability in PHP before 4.4.7, and 5.x before 5.2.2, allows context-dependent attackers to execute arbitrary code by interrupting the session_regenerate_id function, as demonstrated by calling a userspace error handler or triggering a memory limit violation.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-03-20  
Modified Date
2011-03-07  
Seq
2007-1521  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
272110 53705 CVE-2007-1521 http://docs.info.apple.com/article.html?artnum=306172  View
272111 53705 CVE-2007-1521 APPLE-SA-2007-07-31  View
272112 53705 CVE-2007-1521 GLSA-200705-19  View
272113 53705 CVE-2007-1521 http://us2.php.net/releases/4_4_7.php  View
272114 53705 CVE-2007-1521 http://us2.php.net/releases/5_2_2.php  View
272115 53705 CVE-2007-1521 DSA-1282  View
272116 53705 CVE-2007-1521 DSA-1283  View
272117 53705 CVE-2007-1521 SUSE-SA:2007:032  View
272118 53705 CVE-2007-1521 http://www.php-security.org/MOPB/MOPB-22-2007.html  View
272119 53705 CVE-2007-1521 22968  View
272120 53705 CVE-2007-1521 25159  View
272121 53705 CVE-2007-1521 USN-455-1  View
272122 53705 CVE-2007-1521 ADV-2007-0960  View
272123 53705 CVE-2007-1521 ADV-2007-2732  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51679 JVNDB-2007-000342 PHP の session_regenerate_id() 関数におけるメモリ二重解放の脆弱性 PHP の新しいセッション ID の生成に利用される session_regenerate_id() 関数には、メモリの二重解放が発生する脆弱性が存在します。 CVE-2007-1521 24876 CVE-2007-1521 53705 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000342.html 2007-03-14 2007-05-25 View