NVD

Id
56706  
Name
CVE-2007-4586  
Description
Multiple buffer overflows in php_iisfunc.dll in the iisfunc extension for PHP 5.2.0 and earlier allow context-dependent attackers to execute arbitrary code, probably during Unicode conversion, as demonstrated by a long string in the first argument to the iis_getservicestate function, related to the ServiceId argument to the (1) fnStartService, (2) fnGetServiceState, (3) fnStopService, and possibly other functions.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-08-28  
Modified Date
2008-09-05  
Seq
2007-4586  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
289090 56706 CVE-2007-4586 4318  View
289091 56706 CVE-2007-4586 25452  View
289092 56706 CVE-2007-4586 php-phpiisfunc-bo(36262)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55648 JVNDB-2007-004340 PHP 用の iisfunc エクステンションにおけるバッファオーバーフローの脆弱性 PHP 用の iisfunc エクステンションの php_iisfunc.dll は、以下の関数への ServiceId の引数に関する処理に不備があるため、バッファオーバーフローの脆弱性が存在します。 CVE-2007-4586 27941 CVE-2007-4586 56706 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004340.html 2007-08-28 2012-09-25 View