CVE-2007-1649: High severity PHP PHP vulnerability
PHP 5.2.1 allows context-dependent attackers to read portions of heap memory by executing certain scripts with a serialized data input string beginning with S:, which does not properly track the number of input bytes being processed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1649?
CVE-2007-1649 is rated as a medium severity vulnerability due to its potential to allow attackers to read sensitive information from memory.
How do I fix CVE-2007-1649?
To fix CVE-2007-1649, upgrade PHP to a version later than 5.2.1 that addresses the memory handling issue.
What types of attacks can exploit CVE-2007-1649?
CVE-2007-1649 can be exploited by context-dependent attackers who pass specially crafted serialized data to PHP scripts.
Which versions of PHP are affected by CVE-2007-1649?
CVE-2007-1649 specifically affects PHP version 5.2.1.
What are the consequences of an exploit of CVE-2007-1649?
An exploit of CVE-2007-1649 could allow attackers to read unintended portions of the heap memory, potentially exposing sensitive data.