CVE-2007-1411: Buffer Overflow
Published Mar 10, 2007
·Updated
Buffer overflow in PHP 4.4.6 and earlier, and unspecified PHP 5 versions, allows local and possibly remote attackers to execute arbitrary code via long server name arguments to the (1) mssqlconnect and (2) mssqlpconnect functions.
Affected Software
1 affected component
PHP PHP<=4.4.6
Event History
Mar 10, 2007
CVE Published
10:19 PM
Mar 11, 2007
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-1411?
CVE-2007-1411 is a critical vulnerability due to its potential for arbitrary code execution.
2
How do I fix CVE-2007-1411?
To fix CVE-2007-1411, upgrade to PHP version 5 or later, as versions 4.4.6 and earlier are vulnerable.
3
What software is affected by CVE-2007-1411?
CVE-2007-1411 affects PHP 4.4.6 and earlier versions, as well as unspecified versions of PHP 5.
4
Can CVE-2007-1411 be exploited remotely?
Yes, CVE-2007-1411 can potentially be exploited remotely if certain conditions are met.
5
What functions are involved in CVE-2007-1411?
CVE-2007-1411 specifically involves the mssql_connect and mssql_pconnect functions in PHP.