7.2
CVSSv2

CVE-2007-2511

Published: 09/05/2007 Updated: 30/10/2018
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 641
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Buffer overflow in the user_filter_factory_create function in PHP prior to 5.2.2 has unknown impact and local attack vectors.

Vulnerable Product Search on Vulmon Subscribe to Product

php php 4.0.3

php php 4.0.4

php php 4.1.0

php php 4.1.1

php php 4.3.1

php php 4.3.10

php php 4.3.8

php php 4.3.9

php php 4.0.2

php php 4.0.7

php php 4.2.3

php php 4.3.0

php php 4.3.5

php php 4.3.6

php php 4.3.7

php php 4.4.4

php php 4.4.5

php php 4.0.0

php php 4.0.1

php php 4.0.5

php php 4.0.6

php php 4.1.2

php php 4.2.0

php php 4.3.11

php php 4.3.2

php php 4.4.0

php php 4.4.1

php php 5.0

php php 4.4.6

php php 5.0.0

php php 4.2.1

php php 4.2.2

php php 4.3.3

php php 4.3.4

php php 4.4.2

php php 4.4.3

Vendor Advisories

A flaw was discovered in the FTP command handler in PHP Commands were not correctly filtered for control characters An attacker could issue arbitrary FTP commands using specially crafted arguments (CVE-2007-2509) ...