NVD

Id
56896  
Name
CVE-2007-4783  
Description
The iconv_substr function in PHP 5.2.4 and earlier allows context-dependent attackers to cause (1) a denial of service (application crash) via a long string in the charset parameter, probably also requiring a long string in the str parameter; or (2) a denial of service (temporary application hang) via a long string in the str parameter. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2007-09-10  
Modified Date
2011-03-07  
Seq
2007-4783  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
290403 56896 CVE-2007-4783 3115  View
290404 56896 CVE-2007-4783 http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0242  View
290405 56896 CVE-2007-4783 GLSA-200710-02  View
290406 56896 CVE-2007-4783 20070905 PHP <=5.2.4 iconv_substr() denial of service  View
290407 56896 CVE-2007-4783 HPSBUX02332  View
290408 56896 CVE-2007-4783 https://issues.rpath.com/browse/RPL-1943  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52255 JVNDB-2007-000945 PHP の iconv_substr() 関数における複数のサービス運用妨害 (DoS) の脆弱性 PHP の iconv_substr() 関数には、charset パラメータの文字列、および str パラメータの文字列を適切に処理をしないため、サービス運用妨害 (DoS) の脆弱性が存在します。 CVE-2007-4783 28138 CVE-2007-4783 56896 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000945.html 2007-09-10 2008-05-21 View