CVE-2007-4661

Advisory lineage Upstream: 0 Downstream: 1

Downstream

RHSA-2007:0917

Modified

Published: 04 Sept 2007, 22:00

Last modified:07 Aug 2024, 15:01

Vulnerability Summary

Overall Risk (default)

medium

41/100

CVSS Score

7.5 HIGH

v2.0 (nvd)

EPSS Score

4.61% LOW

5% probability +0.73%

KEV

Not listed

Ransomware

No reports

Public exploits

1 found

Dark Web

Not detected

Timeline

04 Sept 2007, 22:00

Published

Vulnerability first disclosed

07 Aug 2024, 15:01

Last Modified

Vulnerability information updated

Description

The chunk_split function in string.c in PHP 5.2.3 does not properly calculate the needed buffer size due to precision loss when performing integer arithmetic with floating point numbers, which has unknown attack vectors and impact, possibly resulting in a heap-based buffer overflow. NOTE: this is due to an incomplete fix for CVE-2007-2872.

CVSS Metrics

v2.0•HIGH•Score: 7.5AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS Trends

Current EPSS score: 4.61%• Percentile: 89%

Techniques & Countermeasures

CWE-119•Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CWE-399•Resource Management Errors
Weaknesses in this category are related to improper management of system resources.

Affected Systems

Unknown•PHP
5.2.3