Improper input validation in Php
CVE-2007-0908
The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize the key_length variable for a numerical key, which allows context-dependent attackers to read stack memory via a wddxPacket element that contains a variable with a string name before a numerical variable.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.118 (95.6th percentile) — read the EPSS interpretation.
Affected products
- Php — versions 4.0
- Canonical Ubuntu_linux — versions 5.10, 6.06, 6.10
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vendor-advisory, Broken Link, x_refsource_DEBIAN)
- cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cve@mitre.org (vendor-advisory, x_refsource_TRUSTIX, Broken Link)
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_OPENPKG)
- cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry, Broken Link)