CVE-2007-0909: High severity PHP PHP vulnerability
Published Feb 13, 2007
·Updated
Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to (1) all of the print functions on 64-bit systems, and (2) the odbcresultall function.
Affected Software
77 affected components
PHP PHP=4.3.9
PHP PHP=3.0
PHP PHP=3.0.5
PHP PHP=3.0.11
PHP PHP=5.1.5
PHP PHP=5.1.2
PHP PHP=4.2.0
PHP PHP=5.1.1
PHP PHP=3.0.1
PHP PHP=3.0.2
PHP PHP=4.4.4
PHP PHP=4.1.0
PHP PHP=5.1.6
PHP PHP=4.3.4
PHP PHP=4.0.4
PHP PHP=4.3.0
PHP PHP=4.0.5
PHP PHP=5.0-rc1
PHP PHP=3.0.8
PHP PHP=5.0.5
PHP PHP=4.3.6
PHP PHP=3.0.13
PHP PHP=5.0.1
PHP PHP=5.1.4
PHP PHP=4.0.7-rc2
PHP PHP=4.3.7
PHP PHP=5.0.4
PHP PHP=4.0.7-rc1
PHP PHP=4.2.2
PHP PHP=4.4.2
PHP PHP=3.0.7
PHP PHP=4.3.2
PHP PHP=4.3.11
PHP PHP=3.0.6
PHP PHP=4.0.3-patch1
PHP PHP=3.0.17
PHP PHP=4.0.7
PHP PHP=4.0.2
PHP PHP=4.3.3
PHP PHP=5.0-rc3
PHP PHP=4.1.1
PHP PHP=3.0.15
PHP PHP=3.0.16
PHP PHP=4.4.3
PHP PHP=5.0.3
PHP PHP=3.0.10
PHP PHP=3.0.4
PHP PHP=4.2.3
PHP PHP=5.1.0
PHP PHP=4.0.1-patch1
PHP PHP=4.0
PHP PHP=4.0.1-patch2
PHP PHP=4.0.6
PHP PHP=5.2.0
PHP PHP=5.0-rc2
PHP PHP=4.1.2
PHP PHP=4.0.7-rc3
PHP PHP=4.3.1
PHP PHP=5.1.3
PHP PHP=3.0.18
PHP PHP=4.4.0
PHP PHP=4.3.10
PHP PHP=4.2.1
PHP PHP=4.0.1
PHP PHP=5.0.2
PHP PHP=3.0.12
PHP PHP=4.2
PHP PHP=4.4.1
PHP PHP=4.0.3
PHP PHP=3.0.14
PHP PHP=3.0.9
PHP PHP=3.0.3
PHP PHP=5.0.0
PHP PHP=4.3.8
PHP PHP=4.3.5
Trustix Secure Linux=3.0
Trustix Secure Linux=2.2
Event History
Feb 13, 2007
CVE Published
11:28 PM
Feb 14, 2007
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-0909?
CVE-2007-0909 is considered a critical vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2007-0909?
To fix CVE-2007-0909, upgrade PHP to version 5.2.1 or later.
3
Which PHP versions are affected by CVE-2007-0909?
CVE-2007-0909 affects multiple versions of PHP, specifically versions prior to 5.2.1.
4
What can attackers do with CVE-2007-0909?
Attackers can exploit CVE-2007-0909 to execute arbitrary code on the server.
5
Is CVE-2007-0909 present in PHP 5.2.1 and later?
No, CVE-2007-0909 has been patched in PHP version 5.2.1 and later.