CVE-2007-1777
NoneCVSS
—
EPSS
15.3%
Published
Mar 30, 2007
CISA due date
—
The record
Integer overflow in the zip_read_entry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code via a ZIP archive that contains an entry with a length value of 0xffffffff, which is incremented before use in an emalloc call, triggering a heap overflow.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:3.1 | php4 | 0 | 4:4.3.10-20 |
| Debian:4.0 | php4 | 0 | 6:4.4.4-8+etch2 |
| Debian:4.0 | php5 | 0 | 5.2.0-8+etch3 |
| Debian:5.0 | php4 | 0 | 6:4.4.4-9+lenny1 |
| Debian:5.0 | php5 | 0 | 5.2.0-10+lenny1 |
Related vulnerabilities
- CVE-2007-1286 Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to… Also affects php4
- CVE-2007-0908 The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5… Also affects php4
- CVE-2006-5465 Buffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via… Also affects php4
- CVE-2005-1921 Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earlier (aka XML-RPC or xmlrpc)… Also affects php4
- CVE-2007-3806 The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of… Also affects php4
- CVE-2009-4017 PHP before 5.2.12 and 5.3.x before 5.3.1 does not restrict the number of temporary files… Also affects php5
- CVE-2007-1399 Stack-based buffer overflow in the zip:// URL wrapper in PECL ZIP 1.8.3 and earlier, as… Also affects php5
- CVE-2007-1376 The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not… Also affects php5