Vulnerability in Php

CVE-2007-1824

Buffer overflow in the php_stream_filter_create function in PHP 5 before 5.2.1 allows remote attackers to cause a denial of service (application crash) via a php://filter/ URL that has a name ending in the '.' character.

EPSS: 0.026 (83.9th percentile) — read the EPSS interpretation.

Affected products

  • Php — versions 5.0.0, 5.0.1, 5.0.2
  • N/a — versions n/a

References