CVE-2007-1453: php
Vulnerability summary
CVE-2007-1453 is a high (CVSS 7.5) vulnerability in php. EPSS estimates a 9.65% chance of exploitation in the next 30 days, higher than 95.4% of scored vulnerabilities. 2 public exploits are recorded.
Weaponized exploit (exploit-database, 12-03-2007)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 2Timeline
- 14-03-2007PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Buffer underflow in the PHP_FILTER_TRIM_DEFAULT macro in the filtering extension (ext/filter) in PHP 5.2.0 allows context-dependent attackers to execute arbitrary code by calling filter_var with certain modes such as FILTER_VALIDATE_INT, which causes filter to write a null byte in whitespace that precedes the buffer.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
9.65%
Chance of exploitation in the next 30 days
Percentile
95%
Versus all other CVEs
30-day change
Increase +0.14 pp
From 9.52% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
2 foundExploit Reference (securityfocus.com)
Maturity: unknown
PHP 5.2 - EXT/Filter Function Remote Buffer Overflow
Maturity: weaponized
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Php1 product
- phpEOL5.2.0
1 vendor · 1 product
References
7 links
- www.php.net/releases/5_2_1.phpX Refsource MISC
- www.php-security.org/MOPB/MOPB-19-2007.htmlX Refsource MISC