CVE-2007-1889: High severity PHP PHP vulnerability

Published Apr 6, 2007

Updated

Integer signedness error in the zendmmallocint function in the Zend Memory Manager in PHP 5.2.0 allows remote attackers to execute arbitrary code via a large emalloc request, related to an incorrect signed long cast, as demonstrated via the HTTP SOAP client in PHP, and via a call to msgreceive with the largest positive integer value of maxsize.

Affected Software

1 affected component

PHP PHP=5.2.0

Remediation

Patch Available

http://www.php-security.org/MOPB/MOPB-43-2007.html

Event History

Apr 6, 2007

CVE Published

01:19 AM

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-1889?

CVE-2007-1889 is classified as having a high severity level due to potential remote code execution threats.

How do I fix CVE-2007-1889?

To fix CVE-2007-1889, update PHP to version 5.2.1 or later to mitigate the vulnerability.

What software versions are affected by CVE-2007-1889?

CVE-2007-1889 specifically affects PHP version 5.2.0.

Can CVE-2007-1889 be exploited remotely?

Yes, CVE-2007-1889 can be exploited remotely, allowing attackers to execute arbitrary code.

What components are involved in CVE-2007-1889?

CVE-2007-1889 involves the Zend Memory Manager in PHP and relates to integer signedness errors.