CVE-2007-1378: Medium severity PHP PHP vulnerability

Published Mar 10, 2007

Updated

The ovrimoslongreadlen function in the Ovrimos extension for PHP before 4.4.5 allows context-dependent attackers to write to arbitrary memory locations via the resultid and length arguments.

Affected Software

67 affected components

PHP PHP=4.3.9

PHP PHP=3.0

PHP PHP=4.0-beta1

PHP PHP=3.0.5

PHP PHP=3.0.11

PHP PHP=4.0-beta4

PHP PHP=4.2.0

PHP PHP=3.0.1

PHP PHP=3.0.2

PHP PHP=4.4.4

PHP PHP=4.1.0

PHP PHP=4.3.4

PHP PHP=4.0.4

PHP PHP=4.3.0

PHP PHP=4.0.5

PHP PHP=3.0.8

PHP PHP=4.3.6

PHP PHP=3.0.13

PHP PHP=4.0.7-rc2

PHP PHP=4.3.7

PHP PHP=4.0.7-rc1

PHP PHP=4.2.2

PHP PHP=4.4.2

PHP PHP=4.0-rc1

PHP PHP=3.0.7

PHP PHP=4.3.2

PHP PHP=4.3.11

PHP PHP=4.0.0

PHP PHP=3.0.6

PHP PHP=4.0.3-patch1

PHP PHP=3.0.17

PHP PHP=4.0.7

PHP PHP=4.0.2

PHP PHP=4.3.3

PHP PHP=4.1.1

PHP PHP=3.0.15

PHP PHP=3.0.16

PHP PHP=4.4.3

PHP PHP=3.0.10

PHP PHP=3.0.4

PHP PHP=4.2.3

PHP PHP=4.0.1-patch1

PHP PHP=4.0

PHP PHP=4.0-beta2

PHP PHP=4.0.1-patch2

PHP PHP=4.0.6

PHP PHP=4.1.2

PHP PHP=4.0.7-rc3

PHP PHP=4.0-rc2

PHP PHP=4.3.1

PHP PHP=3.0.18

PHP PHP=4.0-beta_4_patch1

PHP PHP=4.4.0

PHP PHP=4.3.10

PHP PHP=4.2.1

PHP PHP=4.0.4-patch1

PHP PHP=4.0.1

PHP PHP=3.0.12

PHP PHP=4.2

PHP PHP=4.4.1

PHP PHP=4.0-beta3

PHP PHP=4.0.3

PHP PHP=3.0.14

PHP PHP=3.0.9

PHP PHP=3.0.3

PHP PHP=4.3.8

PHP PHP=4.3.5

Event History

Mar 10, 2007

CVE Published

12:19 AM

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-1378?

CVE-2007-1378 has a medium severity rating as it allows context-dependent attackers to write to arbitrary memory locations.

How do I fix CVE-2007-1378?

To fix CVE-2007-1378, you should upgrade your PHP version to 4.4.5 or later, as the vulnerability is addressed in this release.

What versions of PHP are affected by CVE-2007-1378?

CVE-2007-1378 affects multiple versions of PHP prior to 4.4.5, including 3.x and 4.x branches.

What kind of attacks can exploit CVE-2007-1378?

CVE-2007-1378 can be exploited by attackers to manipulate memory, potentially allowing remote code execution.

Is CVE-2007-1378 still relevant today?

While CVE-2007-1378 is an older vulnerability, it is still relevant for systems running unsupported or outdated PHP versions.