CVE-2007-1452: Medium severity php vulnerability

Published Mar 14, 2007

Updated

The FDF support (ext/fdf) in PHP 5.2.0 and earlier does not implement the input filtering hooks for ext/filter, which allows remote attackers to bypass web site filters via an application/vnd.fdf formatted POST.

Affected Software

17 affected components

PHP PHP=5.1.5

PHP PHP=5.1.2

PHP PHP=5.1.1

PHP PHP=5.1.6

PHP PHP=5.0-rc1

PHP PHP=5.0.5

PHP PHP=5.0.1

PHP PHP=5.1.4

PHP PHP=5.0.4

PHP PHP=5.0-rc3

PHP PHP=5.0.3

PHP PHP=5.1.0

PHP PHP=5.2.0

PHP PHP=5.0-rc2

PHP PHP=5.1.3

PHP PHP=5.0.2

PHP PHP=5.0.0

Event History

Mar 14, 2007

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-1452?

CVE-2007-1452 is considered a moderate severity vulnerability that allows remote attackers to bypass input filtering.

How do I fix CVE-2007-1452?

To fix CVE-2007-1452, upgrade to PHP version 5.2.1 or later where the input filtering hooks are correctly implemented.

Which PHP versions are affected by CVE-2007-1452?

CVE-2007-1452 affects PHP versions 5.2.0 and earlier, including versions 5.1.x and 5.0.x.

Can CVE-2007-1452 be exploited remotely?

Yes, CVE-2007-1452 can be exploited remotely by sending specially crafted application/vnd.fdf formatted POST requests.

What is the impact of CVE-2007-1452 on web applications?

The impact of CVE-2007-1452 is that it allows attackers to bypass web application filters, potentially leading to further exploitation.