CVE-2007-2510
MEDIUM severity · CVSS 5.1 · Memory corruption
5.1CVSS MEDIUM
Summary
Buffer overflow in the make_http_soap_request function in PHP before 5.2.2 has unknown impact and remote attack vectors, possibly related to "/" (slash) characters.
Impact & exploitability
Attack vectorNetwork
Attack complexityHigh
Privileges required—
User interaction—
Confidentiality impact—
Integrity impact—
Availability impact—
Exploit probability (EPSS)2%
AV:N/AC:H/Au:N/C:P/I:P/A:P
Affected products we track (1)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Additional information
- NVD record
- http://secunia.com/advisories/25187Advisory
- http://secunia.com/advisories/25191Advisory
- http://secunia.com/advisories/25255Advisory
- http://secunia.com/advisories/25318Advisory
- http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html
- http://osvdb.org/34675
- http://secunia.com/advisories/25372
- http://secunia.com/advisories/25445