CVE-2007-1376
The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that...
The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that their arguments correspond to a shmop resource, which allows context-dependent attackers to read and write arbitrary memory locations via arguments associated with an inappropriate resource, as demonstrated by a GD Image resource.
Exploit likelihood
What each source reports
NVD Score used
The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that their arguments correspond to a shmop resource, which allows context-dependent attackers to read and write arbitrary memory locations via arguments associated with an inappropriate resource, as demonstrated by a GD Image resource.
- Record
CVE-2007-1376- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that their arguments correspond to a shmop resource, which allows context-dependent attackers to read and write arbitrary memory locations via arguments associated with an inappropriate resource, as demonstrated by a GD Image resource.
- Record
CVE-2007-1376- Updated
- 2026-11-02
EUVDEUVD-2007-1372 No score
The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that their arguments correspond to a shmop resource, which allows context-dependent attackers to read and write arbitrary memory locations via arguments associated with an inappropriate resource, as demonstrated by a GD Image resource.
- Record
EUVD-2007-1372- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-47wx-x56j-fgjm No score
The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that...
The shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that their arguments correspond to a shmop resource, which allows context-dependent attackers to read and write arbitrary memory locations via arguments associated with an inappropriate resource, as demonstrated by a GD Image resource.
- Record
GHSA-47wx-x56j-fgjm- Updated
- 2026-11-02
Affected products
Affected packages
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | PHP < 4.4.5/5.2.1 - 'shmop' Local Code Execution | 2007-03-07 |
| Exploit-DB | PHP < 4.4.5/5.2.1 - 'shmop' SSL RSA Private-Key Disclosure | 2007-03-07 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| aliases | ||
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-1376 is a high vulnerability (CVSS 7.5) in Php, published March 10, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 10.4%, the 95th percentile. No source names a fixed version.
References
secunia.com/advisories/25056
osvdb.org/32781
debian.org/security/2007/dsa-1283
security.gentoo.org/glsa/glsa-200703-21.xml
Show 9 moreShow less
exploit-db.com/exploits/3427
ubuntu.com/usn/usn-455-1
securityfocus.com/bid/22862
php-security.org/MOPB/MOPB-15-2007.html
novell.com/linux/security/advisories/2007_32_php.html
nvd.nist.gov/vuln/detail/CVE-2007-1376
github.com/advisories/GHSA-47wx-x56j-fgjm