CVE-2007-1286

Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unserialize function, which triggers the overflow in the ZVAL reference counter.

CVSS v2.0 NVD

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

40.89% chance of exploitation in the next 30 days, 99th percentile

Published

2007-03-06

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/multi/php/php_unserialize_zval_c…

ExploitDB entries (3)

• https://www.exploit-db.com/exploits/16310
• https://www.exploit-db.com/exploits/9939
• https://www.exploit-db.com/exploits/3396

Security advisories

• http://www.php-security.org/MOPB/MOPB-04-2007.html
• http://www.mandriva.com/security/advisories?name=MDKSA-2007:087
• http://www.mandriva.com/security/advisories?name=MDKSA-2007:088
• http://www.securityfocus.com/bid/22765

References

• CVE Record
• NVD entry