CVE-2007-0988: Buffer Overflow

Published Feb 20, 2007
·
Updated

The zendhashinit function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attackers to cause a denial of service (infinite loop) by unserializing certain integer expressions, which only cause 32-bit arguments to be used after the check for a negative value, as demonstrated by an "a:2147483649:{" argument.

Affected Software

13 affected components
PHP PHP=4.0-beta1
PHP PHP=4.0-beta4
PHP PHP=4.0-rc1
PHP PHP=4.0
PHP PHP=4.0-beta2
PHP PHP=4.0-rc2
PHP PHP=4.0-beta_4_patch1
PHP PHP=4.0-beta3
PHP PHP>=4.0.0<4.4.5
PHP PHP>=5.0.0<5.2.1
Ubuntu=6.06
Ubuntu=6.10
Ubuntu=5.10

Remediation

Event History

Feb 20, 2007
CVE Published
05:28 PM
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description

Frequently Asked Questions

1

What is the severity of CVE-2007-0988?

CVE-2007-0988 is rated as a medium severity vulnerability due to its potential to cause a denial of service.

2

How do I fix CVE-2007-0988?

To fix CVE-2007-0988, upgrade PHP to version 5.2.1 or later, or to version 4.4.5 or later.

3

Which PHP versions are affected by CVE-2007-0988?

CVE-2007-0988 affects PHP 5 prior to version 5.2.1 and PHP 4 prior to version 4.4.5.

4

What type of attack does CVE-2007-0988 enable?

CVE-2007-0988 allows context-dependent attackers to cause a denial of service via an infinite loop when unserializing certain integer expressions.

5

On which platforms does CVE-2007-0988 manifest?

CVE-2007-0988 manifests specifically on 64-bit platforms running the affected versions of PHP.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203