← back
CVE-2007-1286

CVE-2007-1286

EPSS 40.4%
Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unserialize function, which triggers the overflow in the ZVAL reference counter.
Affected products
n/a · n/a
public PoCs found — 3
exploitdbwww.exploit-db.com/exploits/3396unverifiedexploitdbwww.exploit-db.com/exploits/16310unverifiedexploitdbwww.exploit-db.com/exploits/9939unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137http://rhn.redhat.com/errata/RHSA-2007-0154.htmlhttp://rhn.redhat.com/errata/RHSA-2007-0155.htmlhttp://rhn.redhat.com/errata/RHSA-2007-0163.htmlhttp://secunia.com/advisories/24419http://secunia.com/advisories/24606http://secunia.com/advisories/24910http://secunia.com/advisories/24924http://secunia.com/advisories/24941http://secunia.com/advisories/24945http://secunia.com/advisories/25025