Integer overflow in the msg_receive function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1, on FreeBSD and possibly other platforms, allows context-dependent attackers to execute arbitrary code via certain maxsize values, as demonstrated by 0xffffffff.
References
Link | Resource |
---|---|
http://www.php-security.org/MOPB/MOPB-43-2007.html | Exploit Vendor Advisory |
http://www.securityfocus.com/bid/23236 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/33775 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2007-04-05 18:19
Updated : 2018-10-30 09:25
NVD link : CVE-2007-1890
Mitre link : CVE-2007-1890
JSON object : View
CWE
Products Affected
php
- php