vulnwire
6.8med

CVE-2007-15221 exploit

Double free vulnerability in the session extension in PHP 5.2.0 and 5.2.1 allows context-dependent attackers to execute arbitrary code via…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
6.8
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
6.7%
percentile 94%
Public exploits
1
Exploit-DB

Double free vulnerability in the session extension in PHP 5.2.0 and 5.2.1 allows context-dependent attackers to execute arbitrary code via illegal characters in a session identifier, which is rejected by an internal session storage module, which calls the session identifier generator with an improper environment, leading to code execution when the generator is interrupted, as demonstrated by triggering a memory limit violation or certain PHP errors.

Exploit prediction (EPSS)

6.71% probability of exploitation in the next 30 days, higher than 94% of all scored CVEs.

Exploits and detections

  • EDB-3480 PHP 5.2.0/5.2.1 - Rejected Session ID Double-Free · local · 2007-03-14

CVSS scores

Assigned byVersionScoreVector
NVD2.06.8AV:N/AC:M/Au:N/C:P/I:P/A:P

Classification

Technology feeds
PHP (RSS, critical only)

References

  • vupen.com /english/advisories/2007/0960 · vdb-entry, x_refsource_VUPEN, x_transferred
  • secunia.com /advisories/25056 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • secunia.com /advisories/24505 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • php-security.org /MOPB/MOPB-23-2007.html · x_refsource_MISC, x_transferred
  • securityfocus.com /bid/22971 · vdb-entry, x_refsource_BID, x_transferred
  • novell.com /linux/security/advisories/2007_32_php.html · vendor-advisory, x_refsource_SUSE, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.