CVE-2007-1453: High severity PHP PHP vulnerability

Published Mar 14, 2007

Updated

Buffer underflow in the PHPFILTERTRIMDEFAULT macro in the filtering extension (ext/filter) in PHP 5.2.0 allows context-dependent attackers to execute arbitrary code by calling filtervar with certain modes such as FILTERVALIDATEINT, which causes filter to write a null byte in whitespace that precedes the buffer.

Affected Software

1 affected component

PHP PHP=5.2.0

Event History

Mar 14, 2007

CVE Published

06:19 PM

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-1453?

CVE-2007-1453 is considered a high severity vulnerability due to its potential for arbitrary code execution.

How do I fix CVE-2007-1453?

To fix CVE-2007-1453, upgrade PHP to version 5.2.1 or later to mitigate the buffer underflow issue.

Which versions of PHP are affected by CVE-2007-1453?

CVE-2007-1453 affects PHP version 5.2.0 specifically.

What type of vulnerability is CVE-2007-1453?

CVE-2007-1453 is a buffer underflow vulnerability located in the filtering extension of PHP.

Can CVE-2007-1453 be exploited remotely?

Yes, CVE-2007-1453 can potentially be exploited by context-dependent attackers, making it a security risk.