CVE-2007-5653
published 2007-10-23CVE-2007-5653: The Component Object Model (COM) functions in PHP 5.x on Windows do not follow safe_mode and disable_functions restrictions, which allows context-dependent…
PriorityP339critical9.3CVSS 2.0
AVNACMAuNCCICAC
EXPLOIT
EPSS
4.82%
90.9th percentile
The Component Object Model (COM) functions in PHP 5.x on Windows do not follow safe_mode and disable_functions restrictions, which allows context-dependent attackers to bypass intended limitations, as demonstrated by executing objects with the kill bit set in the corresponding ActiveX control Compatibility Flags, executing programs via a function in compatUI.dll, invoking wscript.shell via wscript.exe, invoking Scripting.FileSystemObject via wshom.ocx, and adding users via a function in shgina.dll, related to the com_load_typelib function.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| php | php | <= 5.2.4 | — |
CVSS provenance
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
vendor_redhat9.3CRITICAL
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
CVE-2007-5653: The Component Object Model (COM) functions in PHP 5
vendor_redhat·CVSS 9.3
CVE-2007-5653 [CRITICAL] CVE-2007-5653: The Component Object Model (COM) functions in PHP 5
The Component Object Model (COM) functions in PHP 5.x on Windows do not follow safe_mode and disable_functions restrictions, which allows context-dependent attackers to bypass intended limitations, as demonstrated by executing objects with the kill bit set in the corresponding ActiveX control Compatibility Flags, executing programs via a function in compatUI.dll, invoking wscript.shell via wscript.exe, invoking Scripting.FileSystemObject via wshom.ocx, and adding users via a function in shgina.dll, related to the com_load_typelib function.
Statement: Not vulnerable. These issues did not affect PHP on Linux.
GHSA
GHSA-wrw6-82r7-m5c2: The Component Object Model (COM) functions in PHP 5
ghsa_unreviewed·2022-05-01
CVE-2007-5653 [HIGH] CWE-78 GHSA-wrw6-82r7-m5c2: The Component Object Model (COM) functions in PHP 5
The Component Object Model (COM) functions in PHP 5.x on Windows do not follow safe_mode and disable_functions restrictions, which allows context-dependent attackers to bypass intended limitations, as demonstrated by executing objects with the kill bit set in the corresponding ActiveX control Compatibility Flags, executing programs via a function in compatUI.dll, invoking wscript.shell via wscript.exe, invoking Scripting.FileSystemObject via wshom.ocx, and adding users via a function in shgina.dll, related to the com_load_typelib function.
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/27280http://www.vupen.com/english/advisories/2007/3590https://exchange.xforce.ibmcloud.com/vulnerabilities/37368https://www.exploit-db.com/exploits/4553http://secunia.com/advisories/27280http://www.vupen.com/english/advisories/2007/3590https://exchange.xforce.ibmcloud.com/vulnerabilities/37368https://www.exploit-db.com/exploits/4553
2007-10-23
Published