CVE-2007-1412
published 2007-03-12CVE-2007-1412: The cpdf_open function in the ClibPDF (cpdf) extension in PHP 4.4.6 allows context-dependent attackers to obtain sensitive information (script source code) via…
PriorityP336high7.8CVSS 2.0
AVNACLAuNCCINAN
EXPLOIT
EPSS
5.84%
92.2th percentile
The cpdf_open function in the ClibPDF (cpdf) extension in PHP 4.4.6 allows context-dependent attackers to obtain sensitive information (script source code) via a long string in the second argument.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| php | php | — | — |
CVSS provenance
nvdv2.07.8HIGHAV:N/AC:L/Au:N/C:C/I:N/A:N
vendor_redhat7.8HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
CVE-2007-1412: The cpdf_open function in the ClibPDF (cpdf) extension in PHP 4
vendor_redhat·CVSS 7.8
CVE-2007-1412 [HIGH] CVE-2007-1412: The cpdf_open function in the ClibPDF (cpdf) extension in PHP 4
The cpdf_open function in the ClibPDF (cpdf) extension in PHP 4.4.6 allows context-dependent attackers to obtain sensitive information (script source code) via a long string in the second argument.
Statement: Not vulnerable. PHP as shipped with Red Hat Enterprise Linux 2.1, 3, 4, and 5 does not include ClibPDF support.
GHSA
GHSA-qh3f-4fcx-3j98: The cpdf_open function in the ClibPDF (cpdf) extension in PHP 4
ghsa_unreviewed·2022-05-01
CVE-2007-1412 [HIGH] GHSA-qh3f-4fcx-3j98: The cpdf_open function in the ClibPDF (cpdf) extension in PHP 4
The cpdf_open function in the ClibPDF (cpdf) extension in PHP 4.4.6 allows context-dependent attackers to obtain sensitive information (script source code) via a long string in the second argument.
No detection rules found.
No writeups or analysis indexed.
2007-03-12
Published