VDB
CVE-2007-4782
CVE-2007-4782
PUBLISHED
Reported by mitre · Published September 10, 2007
PHP before 5.2.3 allows context-dependent attackers to cause a denial of service (application crash) via (1) a long string in the pattern parameter to the glob function; or (2) a long string in the string parameter to the fnmatch function, accompanied by a pattern parameter value with undefined characteristics, as demonstrated by a "*[1]e" value. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| n/a | n/a | n/a, n/a, n/a |
Exploit Intelligence
- http://www.securityfocus.com/archive/1/478726/100/0/threaded (vulncheck-nvd)
Timeline
- Sep 10, 2007 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 4, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 9, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- May 25, 2023 EPSS Score
- Jul 17, 2023 EPSS Score
- Sep 8, 2023 EPSS Score
- Dec 22, 2023 EPSS Score
References
- FEDORA-2008-3864 vendor-advisoryx_refsource_FEDORA
- SUSE-SA:2008:004 vendor-advisoryx_refsource_SUSE
- 28658 third-party-advisoryx_refsource_SECUNIA
- 30828 third-party-advisoryx_refsource_SECUNIA
- RHSA-2008:0582 vendor-advisoryx_refsource_REDHAT
- GLSA-200710-02 vendor-advisoryx_refsource_GENTOO
- USN-628-1 vendor-advisoryx_refsource_UBUNTU
- 20070904 PHP < 5.2.3 glob() denial of service mailing-listx_refsource_BUGTRAQ
- RHSA-2008:0545 vendor-advisoryx_refsource_REDHAT
- 31119 third-party-advisoryx_refsource_SECUNIA
- MDVSA-2009:023 vendor-advisoryx_refsource_MANDRIVA
- MDVSA-2009:022 vendor-advisoryx_refsource_MANDRIVA
- php-fnmatch-dos(36457) vdb-entryx_refsource_XF
- 31200 third-party-advisoryx_refsource_SECUNIA
- oval:org.mitre.oval:def:10897 vdb-entrysignaturex_refsource_OVAL
- RHSA-2008:0544 vendor-advisoryx_refsource_REDHAT
- 38686 vdb-entryx_refsource_OSVDB
- php-globfunction-dos(36461) vdb-entryx_refsource_XF
- 27102 third-party-advisoryx_refsource_SECUNIA
- 20070904 PHP < 5.2.3 fnmatch() denial of service mailing-listx_refsource_BUGTRAQ
…and 3 more