NVD

Id
54054  
Name
CVE-2007-1884  
Description
Multiple integer signedness errors in the printf function family in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 on 64 bit machines allow context-dependent attackers to execute arbitrary code via (1) certain negative argument numbers that arise in the php_formatted_print function because of 64 to 32 bit truncation, and bypass a check for the maximum allowable value; and (2) a width and precision of -1, which make it possible for the php_sprintf_appendstring function to place an internal buffer at an arbitrary memory location.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-04-05  
Modified Date
2012-11-05  
Seq
2007-1884  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
274162 54054 CVE-2007-1884 HPSBMA02215  View
274163 54054 CVE-2007-1884 HPSBTU02232  View
274164 54054 CVE-2007-1884 http://www.php-security.org/MOPB/MOPB-38-2007.html  View
274165 54054 CVE-2007-1884 http://www.php.net/releases/5_2_1.php  View
274166 54054 CVE-2007-1884 23219  View
274167 54054 CVE-2007-1884 ADV-2007-1991  View
274168 54054 CVE-2007-1884 ADV-2007-2374  View
274169 54054 CVE-2007-1884 php-printf-format-string(33755)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54955 JVNDB-2007-003647 PHP の printf 関数ファミリにおける整数符号エラーの脆弱性 64 bit マシン上で稼動する PHP の printf 関数ファミリーには、整数符号エラーの脆弱性が存在します。 CVE-2007-1884 25239 CVE-2007-1884 54054 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003647.html 2007-04-05 2012-09-25 View