6.8
CVSSv2

CVE-2007-4507

Published: 23/08/2007 Updated: 29/09/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 685
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple buffer overflows in the php_ntuser component for PHP 5.2.3 allow context-dependent malicious users to cause a denial of service or execute arbitrary code via long arguments to the (1) ntuser_getuserlist, (2) ntuser_getuserinfo, (3) ntuser_getusergroups, or (4) ntuser_getdomaincontroller functions.

Vulnerable Product Search on Vulmon Subscribe to Product

php php 5.2.3

Exploits

<?php //PHP 523 php_ntuser ntuser_getuserlist() Local Buffer Overflow //author: shinnai //mail: shinnai[at]autistici[dot]org //site: shinnaialtervistaorg //greetz to BrainBugger Crew //wwwbrainbuggeraltervistaorg/ //Bug discovered with "Footzo" (thanks to rgod) modified //To download Footzo: //original link: godr ...