NetSight
IP …
high7.5Public exploit code

CVE-2007-1285

The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable destruction routines.

Affected products

VendorProductAffected versions
PhpPhp
from 4.0.0 before 4.4.7
from 5.0.0 before 5.2.2
CanonicalUbuntu Linux
Version 7.10
NovellSuse Linux
Versions 10.0, 10.1
SuseLinux Enterprise Server
Versions 8, 10
RedhatEnterprise Linux Desktop
Versions 3.0, 4.0
RedhatEnterprise Linux Server
Versions 2.0, 3.0, 4.0
RedhatEnterprise Linux Workstation
Versions 2.0, 3.0, 4.0

Weakness classification

CWE-674

References