CVE-2007-0906
Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitrary code via unspecified vectors in the (1) session, (2) zip, (3) imap, and (4) sqlite extensions; (5) stream filters; and the (6) str_replace, (7) mail, (8) ibase_delete_user, (9) ibase_add_user, and (10) ibase_modify_user functions. NOTE: vector 6 might actually be an integer overflow (CVE-2007-1885). NOTE: as of 20070411, vector (3) might involve the imap_mail_compose function (CVE-2007-1825).
Key facts
- CVSS score
- 7.5 (v2.0)
- Severity
- HIGH
- CVSS vector
AV:N/AC:L/Au:N/C:P/I:P/A:P- Weakness (CWE)
- CWE-119
- EPSS score
- 5.6% (93th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2007-0900)
- Published
- February 13, 2007
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2007-0900 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.
View on the EU Vulnerability DatabaseAffected products
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
- php / php
and 27 more…
References
- ftp://patches.sgi.com/support/free/security/advisories/20070201-01-P.asc
- http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html
- http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html
- http://osvdb.org/34706
- http://osvdb.org/34707
- http://osvdb.org/34708
- http://osvdb.org/34709
- http://osvdb.org/34710
- http://osvdb.org/34711
- http://osvdb.org/34712
- http://osvdb.org/34713
- http://osvdb.org/34714
- http://osvdb.org/34715
- http://rhn.redhat.com/errata/RHSA-2007-0089.html(Vendor Advisory)
- http://secunia.com/advisories/24089(Vendor Advisory)
- http://secunia.com/advisories/24195(Vendor Advisory)
- http://secunia.com/advisories/24217(Vendor Advisory)
- http://secunia.com/advisories/24236(Vendor Advisory)
- http://secunia.com/advisories/24248(Vendor Advisory)
- http://secunia.com/advisories/24284(Vendor Advisory)
- http://secunia.com/advisories/24295(Vendor Advisory)
- http://secunia.com/advisories/24322(Vendor Advisory)
- http://secunia.com/advisories/24419(Vendor Advisory)
- http://secunia.com/advisories/24421(Vendor Advisory)
- http://secunia.com/advisories/24432(Vendor Advisory)
- http://secunia.com/advisories/24514(Vendor Advisory)
- http://secunia.com/advisories/24606(Vendor Advisory)
- http://secunia.com/advisories/24642(Vendor Advisory)
- http://secunia.com/advisories/24945(Vendor Advisory)
- http://secunia.com/advisories/26048(Vendor Advisory)
- http://security.gentoo.org/glsa/glsa-200703-21.xml
- http://support.avaya.com/elmodocs2/security/ASA-2007-101.htm
- http://support.avaya.com/elmodocs2/security/ASA-2007-136.htm
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:048
- http://www.openpkg.com/security/advisories/OpenPKG-SA-2007.010.html
- http://www.osvdb.org/32776
- http://www.php.net/ChangeLog-5.php#5.2.1
- http://www.php.net/releases/5_2_1.php
- http://www.redhat.com/support/errata/RHSA-2007-0076.html
- http://www.redhat.com/support/errata/RHSA-2007-0081.html(Vendor Advisory)
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain