Vulnerability in Php

CVE-2007-4507

Multiple buffer overflows in the php_ntuser component for PHP 5.2.3 allow context-dependent attackers to cause a denial of service or execute arbitrary code via long arguments to the (1) ntuser_getuserlist, (2) ntuser_getuserinfo, (3) ntuser_getusergroups, or (4) ntuser_getdomaincontroller functions.

EPSS: 0.052 (91.6th percentile) — read the EPSS interpretation.

Affected products

  • Php — versions 5.2.3
  • N/a — versions n/a

References