CVE-2007-0911: High severity PHP PHP vulnerability
Published Feb 13, 2007
·Updated
Off-by-one error in the strireplace function in PHP 5.2.1 might allow context-dependent attackers to cause a denial of service (crash).
Affected Software
1 affected component
PHP PHP=5.2.1
Event History
Feb 13, 2007
CVE Published
11:28 PM
Feb 14, 2007
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-0911?
CVE-2007-0911 has been rated as a high severity vulnerability due to its potential to cause denial of service.
2
How do I fix CVE-2007-0911?
To fix CVE-2007-0911, you should upgrade PHP to version 5.2.2 or later.
3
What software is affected by CVE-2007-0911?
CVE-2007-0911 specifically affects PHP version 5.2.1.
4
What type of attack does CVE-2007-0911 facilitate?
CVE-2007-0911 allows context-dependent attackers to cause a denial of service, leading to application crashes.
5
Is CVE-2007-0911 a coding error?
Yes, CVE-2007-0911 is due to an off-by-one error in the str_ireplace function in PHP.