CVE-2007-1889 Integer overflow in n/a
Remote attackers can execute arbitrary code via integer signedness errors in the Zend Memory Manager when handling large memory allocation requests.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2007-1889?
CVE-2007-1889 is a high-severity vulnerability in Php Php, published on 6 Apr 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Integer signedness error in the _zend_mm_alloc_int function in the Zend Memory Manager in PHP 5.2.0 allows remote attackers to execute arbitrary code via a large emalloc request, related to an incorrect signed long cast, as demonstrated via the HTTP SOAP client in PHP, and via a call to msg_receive with the largest positive integer value of maxsize.
Which versions are affected by CVE-2007-1889?
It affects 1 product.
Products include Php Php.
How do I fix CVE-2007-1889?
Upgrade to a fixed version.
Is CVE-2007-1889 being exploited?
There is no known exploitation of CVE-2007-1889 in the wild and no public exploit code.
Other vulnerabilities in Php Php
Sources
Also known as GHSA-rgqg-p92w-cgqj.