CVE-2007-4784: Input Validation
The setlocale function in PHP before 5.2.4 allows context-dependent attackers to cause a denial of service (application crash) via a long string in the locale parameter. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless this issue can be demonstrated for code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-4784?
CVE-2007-4784 is classified as a vulnerability that can lead to application crashes but its impact may vary depending on the server environment.
How do I fix CVE-2007-4784?
To fix CVE-2007-4784, upgrade PHP to version 5.2.4 or later to prevent denial of service through the setlocale function.
Which versions of PHP are affected by CVE-2007-4784?
CVE-2007-4784 affects PHP versions prior to 5.2.4.
What type of attack does CVE-2007-4784 enable?
CVE-2007-4784 enables context-dependent attackers to cause a denial of service by supplying a long string in the locale parameter.
Is CVE-2007-4784 a common vulnerability in web server environments?
CVE-2007-4784 may not be a significant vulnerability in web server environments that support multiple threads.