6.8

CVE-2007-1886

EPSS 0.85%
Veröffentlicht 06.04.2007 01:19:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Integer overflow in the str_replace function in PHP 4.4.5 and PHP 5.2.1 allows context-dependent attackers to have an unknown impact via a single character search string in conjunction with a single character replacement string, which causes an "off by one overflow."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Php ≫ Php Version4.4.5

Php ≫ Php Version5.2.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.85%	0.74

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137

http://secunia.com/advisories/25423

http://secunia.com/advisories/25850

http://www.vupen.com/english/advisories/2007/1991

http://www.vupen.com/english/advisories/2007/2374

http://www.php-security.org/MOPB/MOPB-39-2007.html

Patch

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/33768

https://nvd.nist.gov/vuln/detail/CVE-2007-1886

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-1886

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-1886

EUVD