CVE-2007-4661 Integer overflow in n/a
An integer overflow in PHP's chunk_split function may lead to a heap-based buffer overflow, potentially allowing code execution or denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Not stated
- Victim action needed
- Not stated
- Fix
- Available
What is CVE-2007-4661?
CVE-2007-4661 is a high-severity vulnerability in Php Php, published on 4 Sep 2007.
Official description
The chunk_split function in string.c in PHP 5.2.3 does not properly calculate the needed buffer size due to precision loss when performing integer arithmetic with floating point numbers, which has unknown attack vectors and impact, possibly resulting in a heap-based buffer overflow. NOTE: this is due to an incomplete fix for CVE-2007-2872.
Which versions are affected by CVE-2007-4661?
It affects 1 product.
Products include Php Php.
How do I fix CVE-2007-4661?
Upgrade to a fixed version.
Is CVE-2007-4661 being exploited?
There is no known exploitation of CVE-2007-4661 in the wild and no public exploit code.
Other vulnerabilities in Php Php
Sources
Also known as GHSA-gm64-4hqj-9wvv.