medium4.6Public exploit code
CVE-2007-4441
Buffer overflow in php_win32std.dll in the win32std extension for PHP 5.2.0 and earlier allows context-dependent attackers to execute arbitrary code via a long…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP 5.2.3 - 'PHP_win32sti' Local Buffer Overflow (2)2007-08-22 · local · windows · Verified
- PHP 5.2.3 - 'PHP_win32sti' Local Buffer Overflow (1)2007-08-22 · local · windows · Verified
- PHP 5.2.0 (Windows x86) - 'PHP_win32sti' Local Buffer Overflow2007-08-18 · dos · windows_x86 · Verified
Impact
Buffer overflow in php_win32std.dll in the win32std extension for PHP 5.2.0 and earlier allows context-dependent attackers to execute arbitrary code via a long string in the filename argument to the win_browse_file function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php | Php | through 5.2.0 |