CVE-2007-4441

EPSS 1.5%

Buffer overflow in php_win32std.dll in the win32std extension for PHP 5.2.0 and earlier allows context-dependent attackers to execute arbitrary code via a long string in the filename argument to the win_browse_file function.

Affected products

n/a · n/a

public PoCs found — 3

exploitdbwww.exploit-db.com/exploits/4302unverified exploitdbwww.exploit-db.com/exploits/4303unverified cve_referencewww.exploit-db.com/exploits/4293unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/36118 https://www.exploit-db.com/exploits/4293 http://www.securityfocus.com/bid/25414