CVE-2007-1890 in PHPinfo

Summary

Integer overflow in the msg_receive function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1, on FreeBSD and possibly other platforms, allows context-dependent attackers to execute arbitrary code via certain maxsize values, as demonstrated by 0xffffffff.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservation

04/05/2007

Disclosure

04/05/2007

Entries

1: VDB-36031

CPE

ready

Exploit

Download

CVSS

7.3

EPSS

0.05342

Activities

Very Low

Sources

Do you need the next level of professionalism?

Upgrade your account now!