NVD

Id
53891  
Name
CVE-2007-1711  
Description
Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbitrary code by overwriting variables pointing to (1) the GLOBALS array or (2) the session data in _SESSION. NOTE: this issue was introduced when attempting to patch CVE-2007-1701 (MOPB-31-2007).  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-03-26  
Modified Date
2012-11-05  
Seq
2007-1711  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
273225 53891 CVE-2007-1711 http://docs.info.apple.com/article.html?artnum=306172  View
273226 53891 CVE-2007-1711 APPLE-SA-2007-07-31  View
273227 53891 CVE-2007-1711 oval:org.mitre.oval:def:10406  View
273228 53891 CVE-2007-1711 RHSA-2007:0154  View
273229 53891 CVE-2007-1711 RHSA-2007:0155  View
273230 53891 CVE-2007-1711 RHSA-2007:0163  View
273231 53891 CVE-2007-1711 GLSA-200705-19  View
273232 53891 CVE-2007-1711 DSA-1282  View
273233 53891 CVE-2007-1711 DSA-1283  View
273234 53891 CVE-2007-1711 MDKSA-2007:087  View
273235 53891 CVE-2007-1711 MDKSA-2007:088  View
273236 53891 CVE-2007-1711 http://www.php-security.org/MOPB/MOPB-32-2007.html  View
273237 53891 CVE-2007-1711 20070418 rPSA-2007-0073-1 php php-mysql php-pgsql  View
273238 53891 CVE-2007-1711 23121  View
273239 53891 CVE-2007-1711 25159  View
273240 53891 CVE-2007-1711 ADV-2007-2732  View
273241 53891 CVE-2007-1711 php-deserializer-code-execution(33575)  View
273242 53891 CVE-2007-1711 https://issues.rpath.com/browse/RPL-1268  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51602 JVNDB-2007-000264 PHP の session_decode() 関数におけるメモリ二重解放の脆弱性 PHP のアンシリアライザに不備が存在するため、session_decode() 関数で不正な文字列を処理した場合に、メモリの二重解放が発生する脆弱性が存在します。 CVE-2007-1711 25066 CVE-2007-1711 53891 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000264.html 2007-03-25 2007-07-23 View