CVE-2007-1484: Medium severity PHP PHP vulnerability
The arrayuserkeycompare function in PHP 4.4.6 and earlier, and 5.x up to 5.2.1, makes erroneous calls to zvaldtor, which triggers memory corruption and allows local users to bypass safemode and execute arbitrary code via a certain unset operation after arrayuserkeycompare has been called.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1484?
CVE-2007-1484 is considered to have a high severity due to its potential for local users to bypass safe_mode and execute arbitrary code.
How do I fix CVE-2007-1484?
To fix CVE-2007-1484, upgrade PHP to version 5.2.2 or later as it resolves the memory corruption issue.
Which versions of PHP are affected by CVE-2007-1484?
CVE-2007-1484 affects PHP versions 4.4.6 and earlier, and 5.0.0 to 5.2.1.
What types of attacks can be executed due to CVE-2007-1484?
Due to CVE-2007-1484, attackers can exploit memory corruption to bypass safe_mode and execute arbitrary code.
Who can exploit CVE-2007-1484?
CVE-2007-1484 can be exploited by local users with access to the affected PHP installations.