CVE-2007-1824: Buffer Overflow
Published Apr 2, 2007
·Updated
Buffer overflow in the phpstreamfiltercreate function in PHP 5 before 5.2.1 allows remote attackers to cause a denial of service (application crash) via a php://filter/ URL that has a name ending in the '.' character.
Affected Software
14 affected components
PHP PHP=5.1.5
PHP PHP=5.1.2
PHP PHP=5.1.1
PHP PHP=5.1.6
PHP PHP=5.0.5
PHP PHP=5.0.1
PHP PHP=5.1.4
PHP PHP=5.0.4
PHP PHP=5.0.3
PHP PHP=5.1.0
PHP PHP=5.2.0
PHP PHP=5.1.3
PHP PHP=5.0.2
PHP PHP=5.0.0
Event History
Apr 2, 2007
CVE Published
11:19 PM
Apr 3, 2007
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-1824?
CVE-2007-1824 is classified as a denial of service vulnerability that causes an application crash.
2
How do I fix CVE-2007-1824?
You can resolve CVE-2007-1824 by upgrading to PHP version 5.2.1 or later.
3
Which versions of PHP are affected by CVE-2007-1824?
CVE-2007-1824 affects PHP versions 5.0.0 through 5.2.0.
4
What type of attack does CVE-2007-1824 enable?
CVE-2007-1824 enables remote attackers to trigger a denial of service through a specially crafted php://filter URL.
5
Is CVE-2007-1824 a local or remote vulnerability?
CVE-2007-1824 is a remote vulnerability, allowing attackers to exploit it over the network.