VDB
CVE-2007-2728
CVE-2007-2728
PUBLISHED
CVSS 5 MEDIUM
The soap extension in PHP calls php_rand_r with an uninitialized seed variable, which has unknown impact and attack vectors, a related issue to the mcrypt_create_iv issue covered by CVE-2007-2727.
EPSS 2.42% · 82.6th percentile
Risk Scores
CVSS 2.0
5
EPSS Score
2.42%
82.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| php | php | |
| n/a | n/a | n/a |
| canonical | ubuntu_linux | 6.06, 6.10, 7.04 |
Timeline
- May 16, 2007 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 1, 2022 CVE Updated
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Oct 27, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 3, 2023 EPSS Score
- May 26, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
References
- http://www.ubuntu.com/usn/usn-485-1 advisory
- 25306 third-party-advisory
- 26895 third-party-advisory
- 26102 third-party-advisory
- http://blog.php-security.org/archives/80-Watching-the-PHP-CVS.html url
- ADV-2007-1839 vdb
- MDKSA-2007:187 vendor-advisory
- 36086 vdb
- SUSE-SR:2007:015 vendor-advisory
- https://nvd.nist.gov/vuln/detail/CVE-2007-2728 advisory