CVE-2007-0907
MEDIUM
5.0
CVSS 2.0
Description
Buffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via unspecified vectors involving the sapi_header_op function.
Affected products and versions
- PHP versions 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, 3.0.11, 3.0.12, 3.0.13, 3.0.14, 3.0.15, 3.0.16, 3.0.17, 3.0.18, 4.0, 4.0.1, 4.0.1patch1, 4.0.1patch2, 4.0.2, 4.0.3, 4.0.3patch1, 4.0.4, 4.0.5, 4.0.6, 4.0.7, 4.0.7rc1, 4.0.7rc2, 4.0.7rc3, 4.1.0, 4.1.1, 4.1.2, 4.2, 4.2.0, 4.2.1, 4.2.2, 4.2.3, 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.3.5, 4.3.6, 4.3.7, 4.3.8, 4.3.9, 4.3.10, 4.3.11, 4.4.0, 4.4.1, 4.4.2, 4.4.3, 4.4.4, 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.0rc1, 5.0rc2, 5.0rc3, 5.1.0, 5.1.1, 5.1.2, 5.1.3, 5.1.4, 5.1.5, 5.1.6, 5.2.0
References
- lists.suse.com http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html
- osvdb.org http://osvdb.org/32767
- rhn.redhat.com http://rhn.redhat.com/errata/RHSA-2007-0089.html
- secunia.com http://secunia.com/advisories/24089
- secunia.com http://secunia.com/advisories/24195
- secunia.com http://secunia.com/advisories/24217
- secunia.com http://secunia.com/advisories/24236
- secunia.com http://secunia.com/advisories/24248
- secunia.com http://secunia.com/advisories/24284
- secunia.com http://secunia.com/advisories/24295
- secunia.com http://secunia.com/advisories/24322
- secunia.com http://secunia.com/advisories/24419
- secunia.com http://secunia.com/advisories/24421
- secunia.com http://secunia.com/advisories/24432
- secunia.com http://secunia.com/advisories/24514
- secunia.com http://secunia.com/advisories/24606
- secunia.com http://secunia.com/advisories/24642
- security.gentoo.org http://security.gentoo.org/glsa/glsa-200703-21.xml
- support.avaya.com http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm
- support.avaya.com http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm
- www.mandriva.com http://www.mandriva.com/security/advisories?name=MDKSA-2007:048
- www.openpkg.com http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html
- www.php.net http://www.php.net/ChangeLog-5.php#5.2.1
- www.php.net http://www.php.net/releases/5_2_1.php
- www.redhat.com http://www.redhat.com/support/errata/RHSA-2007-0076.html
- www.redhat.com http://www.redhat.com/support/errata/RHSA-2007-0081.html
- www.redhat.com http://www.redhat.com/support/errata/RHSA-2007-0082.html
- www.redhat.com http://www.redhat.com/support/errata/RHSA-2007-0088.html
- www.securityfocus.com http://www.securityfocus.com/archive/1/461462/100/0/threaded
- www.securityfocus.com http://www.securityfocus.com/bid/22496 Patch
- www.securitytracker.com http://www.securitytracker.com/id?1017671
- www.trustix.org http://www.trustix.org/errata/2007/0009/
- www.ubuntu.com http://www.ubuntu.com/usn/usn-424-1
- www.ubuntu.com http://www.ubuntu.com/usn/usn-424-2
- www.us.debian.org http://www.us.debian.org/security/2007/dsa-1264
- www.vupen.com http://www.vupen.com/english/advisories/2007/0546
- issues.rpath.com https://issues.rpath.com/browse/RPL-1088
- oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11321
- nvd.nist.gov Official NVD record