CVE-2007-1521: Double Free
Published Mar 20, 2007
·Updated
Double free vulnerability in PHP before 4.4.7, and 5.x before 5.2.2, allows context-dependent attackers to execute arbitrary code by interrupting the sessionregenerateid function, as demonstrated by calling a userspace error handler or triggering a memory limit violation.
Affected Software
1 affected component
PHP PHP<=5.2.1
Event History
Mar 20, 2007
CVE Published
08:19 PM
Mar 21, 2007
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-1521?
CVE-2007-1521 is considered a high severity vulnerability due to the potential for arbitrary code execution.
2
How do I fix CVE-2007-1521?
To fix CVE-2007-1521, upgrade PHP to version 4.4.7 or later, or 5.2.2 or later.
3
What systems are affected by CVE-2007-1521?
CVE-2007-1521 affects PHP versions prior to 4.4.7 and 5.x prior to 5.2.2.
4
What type of vulnerability is CVE-2007-1521?
CVE-2007-1521 is classified as a double free vulnerability.
5
Can CVE-2007-1521 lead to unauthorized access?
Yes, CVE-2007-1521 can potentially allow attackers to execute arbitrary code, leading to unauthorized access.