CVE-2007-1285

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 18%

from disclosure to weapon0 days

Published on NVDMar 6

1st PoCMar 1

exploitation probability

18%top 3% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable destruction routines.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/29692

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References