CVE-2007-2511
HIGH
7.2
CVSS 2.0
Description
Buffer overflow in the user_filter_factory_create function in PHP before 5.2.2 has unknown impact and local attack vectors.
Affected products and versions
- PHP versions 4.0.0, 4.0.1, 4.0.1patch1, 4.0.1patch2, 4.0.2, 4.0.3, 4.0.3patch1, 4.0.4, 4.0.4patch1, 4.0.5, 4.0.6, 4.0.7, 4.0.7rc1, 4.0.7rc2, 4.0.7rc3, 4.1.0, 4.1.1, 4.1.2, 4.2.0, 4.2.1, 4.2.2, 4.2.3, 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.3.5, 4.3.6, 4.3.7, 4.3.8, 4.3.9, 4.3.10, 4.3.11, 4.4.0, 4.4.1, 4.4.2, 4.4.3, 4.4.4, 4.4.5, 4.4.6, 5.0.0, 5.0rc1, 5.0rc2, 5.0rc3
References
- lists.opensuse.org http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html
- osvdb.org http://osvdb.org/34676
- secunia.com http://secunia.com/advisories/25191 Vendor Advisory
- secunia.com http://secunia.com/advisories/25255 Vendor Advisory
- secunia.com http://secunia.com/advisories/25372 Vendor Advisory
- secunia.com http://secunia.com/advisories/25445 Vendor Advisory
- secunia.com http://secunia.com/advisories/26048 Vendor Advisory
- security.gentoo.org http://security.gentoo.org/glsa/glsa-200705-19.xml
- us2.php.net http://us2.php.net/releases/5_2_2.php
- viewcvs.php.net http://viewcvs.php.net/viewvc.cgi/php-src/ext/standard/user_filters.c?r1=1.31.2.4.2.5&r2=1.31.2.4.2.6
- www.mandriva.com http://www.mandriva.com/security/advisories?name=MDKSA-2007:102
- www.trustix.org http://www.trustix.org/errata/2007/0017/
- www.ubuntu.com http://www.ubuntu.com/usn/usn-462-1
- nvd.nist.gov Official NVD record