NVD

Id
56977  
Name
CVE-2007-4887  
Description
The dl function in PHP 5.2.4 and earlier allows context-dependent attackers to cause a denial of service (application crash) via a long string in the library parameter. NOTE: there are limited usage scenarios under which this would be a vulnerability.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2007-09-13  
Modified Date
2011-03-07  
Seq
2007-4887  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
290830 56977 CVE-2007-4887 http://docs.info.apple.com/article.html?artnum=307562  View
290831 56977 CVE-2007-4887 HPSBUX02308  View
290832 56977 CVE-2007-4887 APPLE-SA-2008-03-18  View
290833 56977 CVE-2007-4887 oval:org.mitre.oval:def:5767  View
290834 56977 CVE-2007-4887 3133  View
290835 56977 CVE-2007-4887 http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0242  View
290836 56977 CVE-2007-4887 GLSA-200710-02  View
290837 56977 CVE-2007-4887 http://www.php.net/ChangeLog-5.php#5.2.5  View
290838 56977 CVE-2007-4887 http://www.php.net/releases/5_2_5.php  View
290839 56977 CVE-2007-4887 20070910 PHP <=5.2.4 open_basedir bypass & code exec & denial of service  View
290840 56977 CVE-2007-4887 20070910 /* PHP <=5.2.4 open_basedir bypass & code exec & denial of service errata ... working on windows too .. */  View
290841 56977 CVE-2007-4887 HPSBUX02332  View
290842 56977 CVE-2007-4887 26403  View
290843 56977 CVE-2007-4887 ADV-2007-3825  View
290844 56977 CVE-2007-4887 ADV-2008-0398  View
290845 56977 CVE-2007-4887 ADV-2008-0924  View
290846 56977 CVE-2007-4887 https://issues.rpath.com/browse/RPL-1943  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52257 JVNDB-2007-000947 PHP の dl () 関数におけるサービス運用妨害 (DoS) 状態の脆弱性 PHP の dl() 関数には、引数の文字列の制限を適切に処理しないため、サービス運用妨害 (DoS) の脆弱性が存在します。 CVE-2007-4887 28242 CVE-2007-4887 56977 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000947.html 2007-09-13 2008-05-21 View