CVE-2007-2728
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 2.9%
The soap extension in PHP calls php_rand_r with an uninitialized seed variable, which has unknown impact and attack vectors, a related issue to the mcrypt_create_iv issue covered by CVE-2007-2727. Note: The PHP team argue that this is not a valid security issue.
Produtos afetados
n/a · n/aReferências
http://blog.php-security.org/archives/80-Watching-the-PHP-CVS.htmlhttp://osvdb.org/36086http://secunia.com/advisories/25306http://secunia.com/advisories/26102http://secunia.com/advisories/26895http://www.mandriva.com/security/advisories?name=MDKSA-2007:187http://www.novell.com/linux/security/advisories/2007_15_sr.htmlhttp://www.ubuntu.com/usn/usn-485-1http://www.vupen.com/english/advisories/2007/1839