Skip to main content

Early Access — Mondoo Vulnerability Intelligence is currently in preview.

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

CVE-2007-1285 | Mondoo Vulnerability Intelligence

CVE-2007-1285

HIGH7.5

The Zend Engine in PHP 4

Published Mar 6, 2007

Modified 1 years ago

No fix available

Details

The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable destruction routines.

References

ADVISORYhttp://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html ADVISORYhttp://rhn.redhat.com/errata/RHSA-2007-0154.html ADVISORYhttp://rhn.redhat.com/errata/RHSA-2007-0155.html ADVISORYhttp://rhn.redhat.com/errata/RHSA-2007-0163.html ADVISORYhttp://secunia.com/advisories/24909 ADVISORYhttp://secunia.com/advisories/24910 ADVISORYhttp://secunia.com/advisories/24924 ADVISORYhttp://secunia.com/advisories/24941 ADVISORYhttp://secunia.com/advisories/24945 ADVISORYhttp://secunia.com/advisories/25445 ADVISORYhttp://secunia.com/advisories/26048 ADVISORYhttp://secunia.com/advisories/26642 ADVISORYhttp://secunia.com/advisories/27864 ADVISORYhttp://secunia.com/advisories/28936 ADVISORYhttp://security.gentoo.org/glsa/glsa-200705-19.xml ADVISORYhttp://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.335136 WEBhttp://us2.php.net/releases/4_4_7.php WEBhttp://us2.php.net/releases/5_2_2.php ADVISORYhttp://www.mandriva.com/security/advisories?name=MDKSA-2007:087 ADVISORYhttp://www.mandriva.com/security/advisories?name=MDKSA-2007:088 ADVISORYhttp://www.mandriva.com/security/advisories?name=MDKSA-2007:089 ADVISORYhttp://www.mandriva.com/security/advisories?name=MDKSA-2007:090 WEBhttp://www.osvdb.org/32769 WEBhttp://www.php-security.org/MOPB/MOPB-03-2007.html WEBhttp://www.php.net/ChangeLog-4.php WEBhttp://www.php.net/ChangeLog-5.php#5.2.4 WEBhttp://www.php.net/releases/4_4_8.php WEBhttp://www.php.net/releases/5_2_4.php ADVISORYhttp://www.redhat.com/support/errata/RHSA-2007-0082.html ADVISORYhttp://www.redhat.com/support/errata/RHSA-2007-0162.html WEBhttp://www.securityfocus.com/archive/1/466166/100/0/threaded WEBhttp://www.securityfocus.com/bid/22764 WEBhttp://www.securitytracker.com/id?1017771 ADVISORYhttp://www.ubuntu.com/usn/usn-549-2 WEBhttps://issues.rpath.com/browse/RPL-1268 WEBhttps://launchpad.net/bugs/173043 WEBhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11017 ADVISORYhttps://usn.ubuntu.com/549-1/ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2007-1285

CVSS Analysis

CVSS v3.1

7.5

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

7.5/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Ecosystems

Timeline

PublishedMar 6, 2007

ModifiedAug 7, 2024