CVE-2007-1900: CRLF Injection
CRLF injection vulnerability in the FILTERVALIDATEEMAIL filter in ext/filter in PHP 5.2.0 and 5.2.1 allows context-dependent attackers to inject arbitrary e-mail headers via an e-mail address with a '\n' character, which causes a regular expression to ignore the subsequent part of the address string.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1900?
CVE-2007-1900 is considered a medium severity vulnerability due to its potential for CRLF injection, affecting the security of email headers.
How do I fix CVE-2007-1900?
To fix CVE-2007-1900, upgrade to a PHP version later than 5.2.1 that addresses this CRLF injection vulnerability.
Who is affected by CVE-2007-1900?
CVE-2007-1900 affects users of PHP versions 5.2.0 and 5.2.1, particularly those using the FILTER_VALIDATE_EMAIL filter.
What types of attacks can exploit CVE-2007-1900?
CVE-2007-1900 can be exploited to inject arbitrary email headers, potentially allowing for phishing or spam attacks.
What is the nature of the vulnerability in CVE-2007-1900?
CVE-2007-1900 is a CRLF injection vulnerability that allows attackers to manipulate email addresses and bypass validation.