Buffer overflow in Php
CVE-2007-1887
Buffer overflow in the sqlite_decode_binary function in the bundled sqlite library in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 allows context-dependent attackers to execute arbitrary code via an empty value of the in parameter, as demonstrated by calling the sqlite_udf_decode_binary function with a 0x01 character.
Vulnerability class: Buffer Overflow
EPSS: 0.048 (91.0th percentile) — read the EPSS interpretation.
Affected products
- Php
- Canonical Ubuntu_linux — versions 6.06, 6.10, 7.04
- Debian Debian_linux — versions 4.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_SECUNIA, Not Applicable, third-party-advisory)
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_DEBIAN)
- cve@mitre.org (Permissions Required, vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (vendor-advisory, Third Party Advisory, x_refsource_GENTOO)
- cve@mitre.org (x_refsource_OVAL, signature, Third Party Advisory, vdb-entry)
- cve@mitre.org (x_refsource_CONFIRM, Release Notes, Vendor Advisory)
- cve@mitre.org (x_refsource_MISC, Broken Link, Vendor Advisory)
- cve@mitre.org (x_refsource_SECUNIA, Not Applicable, third-party-advisory)
- cve@mitre.org (x_refsource_FEDORA, vendor-advisory, Mailing List, Third Party Advisory)
- cve@mitre.org (x_refsource_UBUNTU, vendor-advisory, Third Party Advisory)