Buffer overflow in the user_filter_factory_create function in PHP before 5.2.2 has unknown impact and local attack vectors.

Exploit prediction (EPSS)

0.44% probability of exploitation in the next 30 days, higher than 39% of all scored CVEs.

CVSS scores

Classification

Technology feeds

PHP (RSS, critical only)

References

• osvdb.org /34676 · vdb-entry, x_refsource_OSVDB, x_transferred
• secunia.com /advisories/25191 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• ubuntu.com /usn/usn-462-1 · vendor-advisory, x_refsource_UBUNTU, x_transferred
• mandriva.com /security/advisories?name=MDKSA-2007:102 · vendor-advisory, x_refsource_MANDRIVA, x_transferred
• secunia.com /advisories/26048 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• security.gentoo.org /glsa/glsa-200705-19.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
• trustix.org /errata/2007/0017/ · vendor-advisory, x_refsource_TRUSTIX, x_transferred
• us2.php.net /releases/5_2_2.php · x_refsource_CONFIRM, x_transferred
• secunia.com /advisories/25255 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• secunia.com /advisories/25445 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• viewcvs.php.net /viewvc.cgi/php-src/ext/standard/user_filters.c?r1=1.31.2.4.2.5&r2=1.31.2.4.2.6 · x_refsource_CONFIRM, x_transferred
• secunia.com /advisories/25372 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• lists.opensuse.org /opensuse-security-announce/2007-07/msg00006.html · vendor-advisory, x_refsource_SUSE, x_transferred

Sources

• CVE List: CVE-2007-2511
• NVD: CVE-2007-2511

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.