CVE-2007-0911 : Detail

CVE-2007-0911

3.01%V3
Network
2007-02-13
22h00 +00:00
2018-10-16
12h57 +00:00
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

Off-by-one error in the str_ireplace function in PHP 5.2.1 might allow context-dependent attackers to cause a denial of service (crash).

CVE Informations

Metrics

Metrics Score Severity CVSS Vector Source
V2 7.8 AV:N/AC:L/Au:N/C:N/I:N/A:C [email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Exploit information

Exploit Database EDB-ID : 29577

Publication date : 2007-02-08 23h00 +00:00
Author : Thomas Hruska
EDB Verified : Yes

source: https://www.securityfocus.com/bid/22505/info PHP is prone to a denial-of-service vulnerability because it fails to properly sanitize user-supplied input. An attacker who can run PHP code on a vulnerable computer may exploit this vulnerability to crash PHP and the webserver, denying service to legitimate users. This issue affects PHP 5.2.1; other versions may also be vulnerable. <? $Data = "Change tracking and management software designed to watch for abnormal system behavior.\nSuggest features, report bugs, or ask questions here."; $Data = str_ireplace("\r\n", "<br>", $Data); $Data = str_ireplace("\n", "<br>", $Data); $Data = str_ireplace("\r\n", "<br>", $Data); $Data = str_ireplace("\n", "<br>", $Data); $Data = str_ireplace("\r\n", "<br>", $Data); $Data = str_ireplace("\n", "<br>", $Data); $Data = str_ireplace("\r\n", "<br>", $Data); $Data = str_ireplace("\n", "<br>", $Data); $Data = str_ireplace("\r\n", "<br>", $Data); $Data = str_ireplace("\n", "<br>", $Data); $Data = str_ireplace("\r\n", "<br>", $Data); $Data = str_ireplace("\n", "<br>", $Data); $Data = str_ireplace("\r\n", "<br>", $Data); $Data = str_ireplace("\n", "<br>", $Data); ?>

Products Mentioned

Configuraton 0

Php>>Php >> Version 5.2.1

References

http://secunia.com/advisories/24606
Tags : third-party-advisory, x_refsource_SECUNIA
http://osvdb.org/33952
Tags : vdb-entry, x_refsource_OSVDB
http://marc.info/?l=php-dev&m=117104930526516&w=2
Tags : mailing-list, x_refsource_MLIST
http://secunia.com/advisories/24514
Tags : third-party-advisory, x_refsource_SECUNIA
http://security.gentoo.org/glsa/glsa-200703-21.xml
Tags : vendor-advisory, x_refsource_GENTOO
http://www.securityfocus.com/bid/22505
Tags : vdb-entry, x_refsource_BID
http://marc.info/?l=php-dev&m=117106751715609&w=2
Tags : mailing-list, x_refsource_MLIST