What is CVE-2007-2511?

CVE-2007-2511 is a high-severity software vulnerability with a CVSS score of 7.2. Buffer overflow in the user_filter_factory_create function in PHP before 5.2.2 has unknown impact and local attack vectors.

Is CVE-2007-2511 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 0%.

What products does CVE-2007-2511 affect?

Tracked products affected include PHP. Check the version you run to see whether it is affected.

How do I fix CVE-2007-2511?

Apply the vendor fix promptly. Upgrade affected products to a fixed version.

← All products

CVE-2007-2511

HIGH severity · CVSS 7.2

7.2CVSS HIGH

Summary

Buffer overflow in the user_filter_factory_create function in PHP before 5.2.2 has unknown impact and local attack vectors.

Impact & exploitability

Attack vectorLocal

Attack complexityLow

Privileges required—

User interaction—

Confidentiality impact—

Integrity impact—

Availability impact—

Exploit probability (EPSS)0%

AV:L/AC:L/Au:N/C:C/I:C/A:C

Affected products we track (1)

PHP

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Additional information

NVD record
http://secunia.com/advisories/25191Advisory
http://secunia.com/advisories/25255Advisory
http://secunia.com/advisories/25372Advisory
http://secunia.com/advisories/25445Advisory
http://secunia.com/advisories/26048Advisory
http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html
http://osvdb.org/34676
http://security.gentoo.org/glsa/glsa-200705-19.xml