Is CVE-2007-0910 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 3%.

What products does CVE-2007-0910 affect?

Tracked products affected include PHP. Check the version you run to see whether it is affected.

How do I fix CVE-2007-0910?

Apply the vendor fix promptly. Upgrade affected products to a fixed version.

CVE-2007-0910

Q: What is CVE-2007-0910?

CVE-2007-0910 is a high-severity software vulnerability with a CVSS score of 10. Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors.

HIGH severity · CVSS 10

10CVSS HIGH

Summary

Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors.

Impact & exploitability

Attack vectorNetwork

Attack complexityLow

Privileges required—

User interaction—

Confidentiality impact—

Integrity impact—

Availability impact—

Exploit probability (EPSS)3%

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products we track (1)

PHP

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Additional information

NVD record
http://secunia.com/advisories/24089Advisory
http://secunia.com/advisories/24195Advisory
http://secunia.com/advisories/24217Advisory
http://secunia.com/advisories/24236Advisory
ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc
http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html
http://osvdb.org/32763
http://rhn.redhat.com/errata/RHSA-2007-0089.html