CVE-2007-1711: Double Free

Published Mar 27, 2007

Updated

Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbitrary code by overwriting variables pointing to (1) the GLOBALS array or (2) the session data in SESSION. NOTE: this issue was introduced when attempting to patch CVE-2007-1701 (MOPB-31-2007).

Affected Software

2 affected components

PHP PHP=4.4.5

PHP PHP=4.4.6

Event History

Mar 27, 2007

CVE Published

01:19 AM

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-1711?

CVE-2007-1711 has a severity rating that indicates a vulnerability allowing arbitrary code execution.

Who is affected by CVE-2007-1711?

CVE-2007-1711 affects PHP versions 4.4.5 and 4.4.6.

How do I fix CVE-2007-1711?

To fix CVE-2007-1711, upgrade your PHP installation to a version later than 4.4.6.

What types of attacks can exploit CVE-2007-1711?

CVE-2007-1711 can be exploited by attackers to overwrite variables and execute arbitrary code.

Is CVE-2007-1711 still relevant today?

While CVE-2007-1711 specifically affects older PHP versions, it highlights the importance of maintaining up-to-date software to mitigate vulnerabilities.