7.5

CVE-2007-1864

Buffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has unknown impact and remote attack vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Php ≫ Php Version < 4.4.7
Php ≫ Php Version >= 5.1.0 <= 5.1.6
Php ≫ Php Version >= 5.2.0 < 5.2.2
Debian ≫ Debian Linux Version3.1
Debian ≫ Debian Linux Version4.0
Canonical ≫ Ubuntu Linux Version6.06 SwEditionlts
Canonical ≫ Ubuntu Linux Version6.10
Canonical ≫ Ubuntu Linux Version7.04
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.92% 0.852
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://secunia.com/advisories/25945
Third Party Advisory
Permissions Required
http://www.debian.org/security/2007/dsa-1331
Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html
Third Party Advisory
Mailing List
http://secunia.com/advisories/26048
Third Party Advisory
Permissions Required
http://secunia.com/advisories/25445
Third Party Advisory
Permissions Required
http://security.gentoo.org/glsa/glsa-200705-19.xml
Third Party Advisory
http://us2.php.net/releases/4_4_7.php
Patch
Vendor Advisory
http://us2.php.net/releases/5_2_2.php
Patch
Vendor Advisory
http://secunia.com/advisories/25938
Third Party Advisory
Permissions Required
http://www.debian.org/security/2007/dsa-1330
Third Party Advisory
http://secunia.com/advisories/25255
Third Party Advisory
Permissions Required
http://www.trustix.org/errata/2007/0017/
Broken Link
http://osvdb.org/34674
Broken Link
http://secunia.com/advisories/25187
Third Party Advisory
Permissions Required
http://secunia.com/advisories/25191
Third Party Advisory
Permissions Required
http://secunia.com/advisories/25660
Third Party Advisory
Permissions Required
http://secunia.com/advisories/26102
Third Party Advisory
Permissions Required
http://secunia.com/advisories/27377
Third Party Advisory
Permissions Required
http://support.avaya.com/elmodocs2/security/ASA-2007-231.htm
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:102
Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:103
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0349.html
Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0355.html
Third Party Advisory
http://www.securityfocus.com/bid/23813
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1018024
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/usn-485-1
Third Party Advisory
http://www.vupen.com/english/advisories/2007/2187
Third Party Advisory
Permissions Required
https://issues.rpath.com/browse/RPL-1693
Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11257
Third Party Advisory
https://rhn.redhat.com/errata/RHSA-2007-0348.html
Third Party Advisory