Every CVE Search/ Get API key

CVE-2007-1286

Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute...

6.8 MediumPublic exploitFix available

CVE-2007-1286 is a medium vulnerability (CVSS 6.8) in Php, published March 6, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 40.9%, the 98th percentile. Fixed in php4 4:4.3.10-20.

Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unserialize function, which triggers the overflow in the ZVAL reference counter.

Exploit likelihood

40.9%Down 30.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unserialize function, which triggers the overflow in the ZVAL reference counter.

Record
CVE-2007-1286
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unserialize function, which triggers the overflow in the ZVAL reference counter.

Record
CVE-2007-1286
Updated
2026-11-02
EUVDEUVD-2007-1283 No score

Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unserialize function, which triggers the overflow in the ZVAL reference counter.

Record
EUVD-2007-1283
Updated
2026-11-03
GitHub AdvisoriesGHSA-5g4m-4pg3-qmxc No score

Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute...

Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unserialize function, which triggers the overflow in the ZVAL reference counter.

Record
GHSA-5g4m-4pg3-qmxc
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
php4
Debian:3.1
 before 4:4.3.10-20, plus listed versions
4:4.3.10-154:4.3.10-164:4.3.10-174:4.3.10-184:4.3.10-19
4:4.3.10-20
php4
Debian:4.0
 before 6:4.4.4-8+etch2, plus listed versions
6:4.4.4-8+etch1
6:4.4.4-8+etch2
php5
Debian:4.0
 before 5.2.0-8+etch3, plus listed versions
5.2.0-8+etch1
5.2.0-8+etch3
php5
Debian:5.0
 before 5.2.0-10+lenny1
5.2.0-10+lenny1
php4
Debian:5.0
 before 6:4.4.4-9+lenny1, plus listed versions
4.0.3pl1-0potato34.0.3pl1-0potato44:4.1.2-74:4.1.2-7.0.14:4.1.2-7.woody3
Show 41 moreShow less
4:4.1.2-7.woody44:4.1.2-7.woody54:4.1.2-7woody14:4.1.2-7woody24:4.3.10-104:4.3.10-114:4.3.10-124:4.3.10-134:4.3.10-144:4.3.10-154:4.3.10-164:4.3.10-174:4.3.10-184:4.3.10-194:4.3.10-204:4.3.10-214:4.3.10-224:4.3.10-84:4.3.10-94:4.4.0-14:4.4.0-24:4.4.0-34:4.4.0-44:4.4.2-14:4.4.2-1+b14:4.4.2-1.14:4.4.4-14:4.4.4-24:4.4.4-34:4.4.4-44:4.4.4-4~44:4.4.4-54:4.4.4-64:4.4.4-76:4.4.4-86:4.4.4-8+etch16:4.4.4-8+etch26:4.4.4-8+etch36:4.4.4-8+etch46:4.4.4-8+etch66:4.4.4-9
6:4.4.4-9+lenny1
php
Red Hat:enterprise_linux:2.1::as
 before 0:4.1.2-2.17
0:4.1.2-2.17
php-devel
Red Hat:enterprise_linux:2.1::as
 before 0:4.1.2-2.17
0:4.1.2-2.17
php-imap
Red Hat:enterprise_linux:2.1::as
 before 0:4.1.2-2.17
0:4.1.2-2.17
php-ldap
Red Hat:enterprise_linux:2.1::as
 before 0:4.1.2-2.17
0:4.1.2-2.17
php-manual
Red Hat:enterprise_linux:2.1::as
 before 0:4.1.2-2.17
0:4.1.2-2.17
Show 128 moreShow less
Affected packages
PackageAffectedFixed
php-mysql
Red Hat:enterprise_linux:2.1::as
 before 0:4.1.2-2.17
0:4.1.2-2.17
php-odbc
Red Hat:enterprise_linux:2.1::as
 before 0:4.1.2-2.17
0:4.1.2-2.17
php-pgsql
Red Hat:enterprise_linux:2.1::as
 before 0:4.1.2-2.17
0:4.1.2-2.17
php
Red Hat:enterprise_linux:2.1::aw
 before 0:4.1.2-2.17
0:4.1.2-2.17
php-devel
Red Hat:enterprise_linux:2.1::aw
 before 0:4.1.2-2.17
0:4.1.2-2.17
php-imap
Red Hat:enterprise_linux:2.1::aw
 before 0:4.1.2-2.17
0:4.1.2-2.17
php-ldap
Red Hat:enterprise_linux:2.1::aw
 before 0:4.1.2-2.17
0:4.1.2-2.17
php-manual
Red Hat:enterprise_linux:2.1::aw
 before 0:4.1.2-2.17
0:4.1.2-2.17
php-mysql
Red Hat:enterprise_linux:2.1::aw
 before 0:4.1.2-2.17
0:4.1.2-2.17
php-odbc
Red Hat:enterprise_linux:2.1::aw
 before 0:4.1.2-2.17
0:4.1.2-2.17
php-pgsql
Red Hat:enterprise_linux:2.1::aw
 before 0:4.1.2-2.17
0:4.1.2-2.17
php
Red Hat:enterprise_linux:2.1::es
 before 0:4.1.2-2.17
0:4.1.2-2.17
php-devel
Red Hat:enterprise_linux:2.1::es
 before 0:4.1.2-2.17
0:4.1.2-2.17
php-imap
Red Hat:enterprise_linux:2.1::es
 before 0:4.1.2-2.17
0:4.1.2-2.17
php-ldap
Red Hat:enterprise_linux:2.1::es
 before 0:4.1.2-2.17
0:4.1.2-2.17
php-manual
Red Hat:enterprise_linux:2.1::es
 before 0:4.1.2-2.17
0:4.1.2-2.17
php-mysql
Red Hat:enterprise_linux:2.1::es
 before 0:4.1.2-2.17
0:4.1.2-2.17
php-odbc
Red Hat:enterprise_linux:2.1::es
 before 0:4.1.2-2.17
0:4.1.2-2.17
php-pgsql
Red Hat:enterprise_linux:2.1::es
 before 0:4.1.2-2.17
0:4.1.2-2.17
php
Red Hat:enterprise_linux:2.1::ws
 before 0:4.1.2-2.17
0:4.1.2-2.17
php-devel
Red Hat:enterprise_linux:2.1::ws
 before 0:4.1.2-2.17
0:4.1.2-2.17
php-imap
Red Hat:enterprise_linux:2.1::ws
 before 0:4.1.2-2.17
0:4.1.2-2.17
php-ldap
Red Hat:enterprise_linux:2.1::ws
 before 0:4.1.2-2.17
0:4.1.2-2.17
php-manual
Red Hat:enterprise_linux:2.1::ws
 before 0:4.1.2-2.17
0:4.1.2-2.17
php-mysql
Red Hat:enterprise_linux:2.1::ws
 before 0:4.1.2-2.17
0:4.1.2-2.17
php-odbc
Red Hat:enterprise_linux:2.1::ws
 before 0:4.1.2-2.17
0:4.1.2-2.17
php-pgsql
Red Hat:enterprise_linux:2.1::ws
 before 0:4.1.2-2.17
0:4.1.2-2.17
php
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php-debuginfo
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php-devel
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php-imap
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php-ldap
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php-mysql
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php-odbc
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php-pgsql
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php-devel
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php-imap
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php-ldap
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php-mysql
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php-odbc
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php-pgsql
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php-debuginfo
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php-devel
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php-imap
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php-ldap
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php-mysql
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php-odbc
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php-pgsql
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php-debuginfo
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php-devel
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php-imap
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php-ldap
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php-mysql
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php-odbc
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php-pgsql
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-40.ent
0:4.3.2-40.ent
php
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-devel
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-domxml
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-gd
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-imap
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-ldap
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-mbstring
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-mysql
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-ncurses
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-odbc
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-pear
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-pgsql
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-snmp
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-xmlrpc
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-devel
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-domxml
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-gd
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-imap
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-ldap
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-mbstring
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-mysql
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-ncurses
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-odbc
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-pear
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-pgsql
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-snmp
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-xmlrpc
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-devel
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-domxml
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-gd
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-imap
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-ldap
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-mbstring
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-mysql
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-ncurses
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-odbc
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-pear
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-pgsql
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-snmp
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-xmlrpc
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-devel
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-domxml
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-gd
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-imap
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-ldap
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-mbstring
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-mysql
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-ncurses
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-odbc
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-pear
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-pgsql
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-snmp
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
php-xmlrpc
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.22.4
0:4.3.9-3.22.4
stronghold-php
Red Hat:rhel_stronghold:4.0
 before 0:4.1.2-15
0:4.1.2-15
stronghold-php-devel
Red Hat:rhel_stronghold:4.0
 before 0:4.1.2-15
0:4.1.2-15
stronghold-php-imap
Red Hat:rhel_stronghold:4.0
 before 0:4.1.2-15
0:4.1.2-15
stronghold-php-ldap
Red Hat:rhel_stronghold:4.0
 before 0:4.1.2-15
0:4.1.2-15
stronghold-php-manual
Red Hat:rhel_stronghold:4.0
 before 0:4.1.2-15
0:4.1.2-15
stronghold-php-mysql
Red Hat:rhel_stronghold:4.0
 before 0:4.1.2-15
0:4.1.2-15
stronghold-php-odbc
Red Hat:rhel_stronghold:4.0
 before 0:4.1.2-15
0:4.1.2-15
stronghold-php-pgsql
Red Hat:rhel_stronghold:4.0
 before 0:4.1.2-15
0:4.1.2-15
stronghold-php-snmp
Red Hat:rhel_stronghold:4.0
 before 0:4.1.2-15
0:4.1.2-15

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBPHP 4 - Unserialize() ZVAL Reference Counter Overflow (Cookie) (Metasploit)2010-09-20
Exploit-DBPHP 4.4.4 - 'Unserialize()' ZVAL Reference Counter Overflow (PoC)2007-03-02
Exploit-DBPHP < 4.5.0 - Unserialize Overflow (Metasploit)2007-03-01
MetasploitPHP 4 unserialize() ZVAL Reference Counter Overflow (Cookie)2007-03-04

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02aliases
2026-11-02createdCVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD, OSV

References

Show 66 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open