CVE-2007-4586: Buffer Overflow
Multiple buffer overflows in phpiisfunc.dll in the iisfunc extension for PHP 5.2.0 and earlier allow context-dependent attackers to execute arbitrary code, probably during Unicode conversion, as demonstrated by a long string in the first argument to the iisgetservicestate function, related to the ServiceId argument to the (1) fnStartService, (2) fnGetServiceState, (3) fnStopService, and possibly other functions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4586?
CVE-2007-4586 has been classified as a critical vulnerability due to the potential for arbitrary code execution.
How do I fix CVE-2007-4586?
To fix CVE-2007-4586, you should upgrade PHP to version 5.2.1 or later, as these versions contain the necessary patches.
Who is affected by CVE-2007-4586?
CVE-2007-4586 affects all users of PHP version 5.2.0 and earlier running on systems that utilize the iisfunc extension.
What types of attacks can exploit CVE-2007-4586?
CVE-2007-4586 can be exploited by context-dependent attackers who manipulate input, particularly during Unicode conversion.
What are the potential consequences of exploiting CVE-2007-4586?
Exploitation of CVE-2007-4586 can lead to remote code execution, allowing attackers to run arbitrary commands on the server.