CVE-2007-1285
High · 7.5CVSS
7.5
EPSS
18.2%
Published
Mar 6, 2007
CISA due date
—
The record
The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable destruction routines.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:enterprise_linux:2.1::as | php | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::as | php-devel | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::as | php-imap | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::as | php-ldap | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::as | php-manual | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::as | php-mysql | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::as | php-odbc | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::as | php-pgsql | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::aw | php | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::aw | php-devel | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::aw | php-imap | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::aw | php-ldap | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::aw | php-manual | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::aw | php-mysql | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::aw | php-odbc | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::aw | php-pgsql | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::es | php | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::es | php-devel | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::es | php-imap | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::es | php-ldap | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::es | php-manual | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::es | php-mysql | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::es | php-odbc | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::es | php-pgsql | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::ws | php | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::ws | php-devel | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::ws | php-imap | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::ws | php-ldap | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::ws | php-manual | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::ws | php-mysql | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::ws | php-odbc | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:2.1::ws | php-pgsql | 0 | 0:4.1.2-2.17 |
| Red Hat:enterprise_linux:3::as | php | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::as | php-debuginfo | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::as | php-devel | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::as | php-imap | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::as | php-ldap | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::as | php-mysql | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::as | php-odbc | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::as | php-pgsql | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::desktop | php | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::desktop | php-debuginfo | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::desktop | php-devel | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::desktop | php-imap | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::desktop | php-ldap | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::desktop | php-mysql | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::desktop | php-odbc | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::desktop | php-pgsql | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::es | php | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::es | php-debuginfo | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::es | php-devel | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::es | php-imap | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::es | php-ldap | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::es | php-mysql | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::es | php-odbc | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::es | php-pgsql | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::ws | php | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::ws | php-debuginfo | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::ws | php-devel | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::ws | php-imap | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::ws | php-ldap | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::ws | php-mysql | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::ws | php-odbc | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:3::ws | php-pgsql | 0 | 0:4.3.2-40.ent |
| Red Hat:enterprise_linux:4::as | php | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::as | php-debuginfo | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::as | php-devel | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::as | php-domxml | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::as | php-gd | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::as | php-imap | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::as | php-ldap | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::as | php-mbstring | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::as | php-mysql | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::as | php-ncurses | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::as | php-odbc | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::as | php-pear | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::as | php-pgsql | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::as | php-snmp | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::as | php-xmlrpc | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php-debuginfo | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php-devel | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php-domxml | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php-gd | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php-imap | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php-ldap | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php-mbstring | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php-mysql | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php-ncurses | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php-odbc | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php-pear | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php-pgsql | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php-snmp | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::desktop | php-xmlrpc | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php-debuginfo | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php-devel | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php-domxml | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php-gd | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php-imap | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php-ldap | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php-mbstring | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php-mysql | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php-ncurses | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php-odbc | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php-pear | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php-pgsql | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php-snmp | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::es | php-xmlrpc | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php-debuginfo | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php-devel | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php-domxml | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php-gd | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php-imap | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php-ldap | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php-mbstring | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php-mysql | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php-ncurses | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php-odbc | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php-pear | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php-pgsql | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php-snmp | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:4::ws | php-xmlrpc | 0 | 0:4.3.9-3.22.4 |
| Red Hat:enterprise_linux:5::client_workstation | php | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-bcmath | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-cli | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-common | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-dba | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-debuginfo | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-devel | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-gd | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-imap | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-ldap | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-mbstring | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-mysql | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-ncurses | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-odbc | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-pdo | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-pgsql | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-snmp | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-soap | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-xml | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::client_workstation | php-xmlrpc | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::server | php | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::server | php-bcmath | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::server | php-cli | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::server | php-common | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::server | php-dba | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::server | php-debuginfo | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::server | php-devel | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::server | php-gd | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::server | php-imap | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::server | php-ldap | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::server | php-mbstring | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::server | php-mysql | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::server | php-ncurses | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::server | php-odbc | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::server | php-pdo | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::server | php-pgsql | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::server | php-snmp | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::server | php-soap | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::server | php-xml | 0 | 0:5.1.6-7.el5 |
| Red Hat:enterprise_linux:5::server | php-xmlrpc | 0 | 0:5.1.6-7.el5 |
| Red Hat:rhel_application_stack:1 | php | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-bcmath | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-cli | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-common | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-dba | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-debuginfo | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-devel | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-gd | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-imap | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-ldap | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-mbstring | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-mysql | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-ncurses | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-odbc | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-pdo | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-pgsql | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-snmp | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-soap | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-xml | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_application_stack:1 | php-xmlrpc | 0 | 0:5.1.6-3.el4s1.6 |
| Red Hat:rhel_stronghold:4.0 | stronghold-php | 0 | 0:4.1.2-15 |
| Red Hat:rhel_stronghold:4.0 | stronghold-php-devel | 0 | 0:4.1.2-15 |
| Red Hat:rhel_stronghold:4.0 | stronghold-php-imap | 0 | 0:4.1.2-15 |
| Red Hat:rhel_stronghold:4.0 | stronghold-php-ldap | 0 | 0:4.1.2-15 |
| Red Hat:rhel_stronghold:4.0 | stronghold-php-manual | 0 | 0:4.1.2-15 |
| Red Hat:rhel_stronghold:4.0 | stronghold-php-mysql | 0 | 0:4.1.2-15 |
| Red Hat:rhel_stronghold:4.0 | stronghold-php-odbc | 0 | 0:4.1.2-15 |
| Red Hat:rhel_stronghold:4.0 | stronghold-php-pgsql | 0 | 0:4.1.2-15 |
| Red Hat:rhel_stronghold:4.0 | stronghold-php-snmp | 0 | 0:4.1.2-15 |
Related vulnerabilities
- CVE-2007-1825 Buffer overflow in the imap_mail_compose function in PHP 5 before 5.2.1, and PHP 4 before… Also affects php
- CVE-2007-1286 Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to… Also affects php
- CVE-2007-0908 The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5… Also affects php
- CVE-2006-4812 Integer overflow in PHP 5 up to 5.1.6 and 4 before 4.3.0 allows remote attackers to… Also affects php
- CVE-2009-4017 PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files… Also affects php
- CVE-2009-3546 The _gdGetColors function in gd_gd.c in PHP 5.2.11 and 5.3.x before 5.3.1, and the GD… Also affects php
- CVE-2007-0455 Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33… Also affects php
- CVE-2006-1990 Integer overflow in the wordwrap function in string.c in PHP 4.4.2 and 5.1.2 might allow… Also affects php