NVD

Id
56132  
Name
CVE-2007-3998  
Description
The wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the breakcharlen variable, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash, or infinite loop) via certain arguments, as demonstrated by a "chr(0), 0, """ argument set.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2007-09-04  
Modified Date
2011-03-07  
Seq
2007-3998  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
285870 56132 CVE-2007-3998 SUSE-SA:2008:004  View
285871 56132 CVE-2007-3998 oval:org.mitre.oval:def:10603  View
285872 56132 CVE-2007-3998 RHSA-2007:0889  View
285873 56132 CVE-2007-3998 http://secweb.se/en/advisories/php-wordwrap-vulnerability/  View
285874 56132 CVE-2007-3998 http://support.avaya.com/elmodocs2/security/ASA-2007-449.htm  View
285875 56132 CVE-2007-3998 DSA-1444  View
285876 56132 CVE-2007-3998 DSA-1578  View
285877 56132 CVE-2007-3998 GLSA-200710-02  View
285878 56132 CVE-2007-3998 MDKSA-2007:187  View
285879 56132 CVE-2007-3998 http://www.php.net/ChangeLog-5.php#5.2.4  View
285880 56132 CVE-2007-3998 http://www.php.net/releases/5_2_4.php  View
285881 56132 CVE-2007-3998 RHSA-2007:0890  View
285882 56132 CVE-2007-3998 RHSA-2007:0891  View
285883 56132 CVE-2007-3998 2007-0026  View
285884 56132 CVE-2007-3998 USN-549-2  View
285885 56132 CVE-2007-3998 USN-549-1  View
285886 56132 CVE-2007-3998 ADV-2007-3023  View
285887 56132 CVE-2007-3998 https://issues.rpath.com/browse/RPL-1693  View
285888 56132 CVE-2007-3998 https://issues.rpath.com/browse/RPL-1702  View
285889 56132 CVE-2007-3998 https://launchpad.net/bugs/173043  View
285890 56132 CVE-2007-3998 FEDORA-2007-709  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51989 JVNDB-2007-000652 PHP の wordwrap() 関数におけるサービス運用妨害 (DoS) の脆弱性 PHP の wordwrap() 関数は breakcharlen 変数を適切に処理しないため、サービス運用妨害 (DoS) 状態にされる脆弱性が存在します。 CVE-2007-3998 27353 CVE-2007-3998 56132 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000652.html 2007-09-04 2008-08-06 View