CVE-2007-1584: Medium severity PHP PHP vulnerability
Published Mar 21, 2007
·Updated
Buffer underflow in the header function in PHP 5.2.0 allows context-dependent attackers to execute arbitrary code by passing an all-whitespace string to this function, which causes it to write '\0' characters in whitespace that precedes the string.
Affected Software
1 affected component
PHP PHP=5.2.0
Event History
Mar 21, 2007
CVE Published
11:19 PM
Mar 22, 2007
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-1584?
CVE-2007-1584 has been classified as a critical vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2007-1584?
To fix CVE-2007-1584, upgrade PHP to a version higher than 5.2.0 where the vulnerability is patched.
3
What systems are affected by CVE-2007-1584?
CVE-2007-1584 specifically affects PHP version 5.2.0.
4
Can CVE-2007-1584 be exploited remotely?
Yes, CVE-2007-1584 can be exploited remotely by attackers through specially crafted inputs.
5
What type of vulnerability is CVE-2007-1584?
CVE-2007-1584 is classified as a buffer underflow vulnerability.