CVE-2007-4782 — MEDIUM (5.0)

Q: How severe is CVE-2007-4782?

CVE-2007-4782 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2007-4782?

Check the references section above for vendor advisories and patch information. Affected products include: Php Php.

Vulnerability Description

PHP before 5.2.3 allows context-dependent attackers to cause a denial of service (application crash) via (1) a long string in the pattern parameter to the glob function; or (2) a long string in the string parameter to the fnmatch function, accompanied by a pattern parameter value with undefined characteristics, as demonstrated by a "*[1]e" value. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P

Confidentiality

NONE

Integrity

NONE

Availability

PARTIAL

Affected Products

Vendor	Product	Versions
Php	Php	<= 5.2.3

Related Weaknesses (CWE)

CWE-94

References

FAQ

What is CVE-2007-4782?

CVE-2007-4782 is a vulnerability with a CVSS score of 5.0 (MEDIUM). PHP before 5.2.3 allows context-dependent attackers to cause a denial of service (application crash) via (1) a long string in the pattern parameter to the glob function; or (2) a long string in the st...

How severe is CVE-2007-4782?

CVE-2007-4782 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2007-4782?

Check the references section above for vendor advisories and patch information. Affected products include: Php Php.