CVE-2007-1381

published 2007-03-10

CVE-2007-1381: The wddx_deserialize function in wddx.c 1.119.2.10.2.12 and 1.119.2.10.2.13 in PHP 5, as modified in CVS on 20070224 and fixed on 20070304, calls strlcpy where…

Priority P3 46 high 7.6 CVSS 2.0

AV N AC H Au N C C I C A C

EXPLOIT

The wddx_deserialize function in wddx.c 1.119.2.10.2.12 and 1.119.2.10.2.13 in PHP 5, as modified in CVS on 20070224 and fixed on 20070304, calls strlcpy where strlcat was intended and uses improper arguments, which allows context-dependent attackers to execute arbitrary code via a WDDX packet with a malformed overlap of a STRING element, which triggers a buffer overflow.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
php	php	—	—

CVSS provenance

nvd v2.0 7.6 HIGH AV:N/AC:H/Au:N/C:C/I:C/A:C

vendor_redhat 7.6 HIGH

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-119