|
CVE Reference: CVE-2007-1582
|
|
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.
|
|
Original Page at CVE MITRE:
CVE-2007-1582
|
|
Description:
The resource system in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent attackers to execute arbitrary code by interrupting certain functions in the GD (ext/gd) extension and unspecified other extensions via a userspace error handler, which can be used to destroy and modify internal resources.
|
|
CVE Status:
Candidate
|
|
References:
SAID
Secunia Advisory: SA24542
MISC
http://www.php-security.org/MOPB/MOPB-27-2007.html
MILW0RM
http://www.milw0rm.com/exploits/3525
BID
23046
|
|
|
Return to the previous page.
|
