CVE-2007-1380

The php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before...

5.0 MediumPublic exploitFix available

The php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before 5.2.1, allows context-dependent attackers to obtain sensitive information (memory contents) via a serialized variable entry with a large length value, which triggers a buffer over-read.

Exploit likelihood

9.43%Down 3.1 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2007-1380
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:P/I:N/A:N
Updated: 2026-11-02

CVE List No score

Record: CVE-2007-1380
Updated: 2026-11-02

EUVDEUVD-2007-1376 No score

Record: EUVD-2007-1376
Updated: 2026-11-03

GitHub AdvisoriesGHSA-599v-cg8r-98qv No score

The php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before...

Record: GHSA-599v-cg8r-98qv
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`php4` Debian:3.1	before 4:4.3.10-20, plus listed versions 4:4.3.10-154:4.3.10-164:4.3.10-174:4.3.10-184:4.3.10-19	4:4.3.10-20
`php4` Debian:4.0	before 6:4.4.4-8+etch2, plus listed versions 6:4.4.4-8+etch1	6:4.4.4-8+etch2
`php5` Debian:4.0	before 5.2.0-8+etch3, plus listed versions 5.2.0-8+etch1	5.2.0-8+etch3
`php5` Debian:5.0	before 5.2.0-10+lenny1	5.2.0-10+lenny1
`php4` Debian:5.0	before 6:4.4.4-9+lenny1, plus listed versions 4.0.3pl1-0potato34.0.3pl1-0potato44:4.1.2-74:4.1.2-7.0.14:4.1.2-7.woody3 Show 41 moreShow less 4:4.1.2-7.woody44:4.1.2-7.woody54:4.1.2-7woody14:4.1.2-7woody24:4.3.10-104:4.3.10-114:4.3.10-124:4.3.10-134:4.3.10-144:4.3.10-154:4.3.10-164:4.3.10-174:4.3.10-184:4.3.10-194:4.3.10-204:4.3.10-214:4.3.10-224:4.3.10-84:4.3.10-94:4.4.0-14:4.4.0-24:4.4.0-34:4.4.0-44:4.4.2-14:4.4.2-1+b14:4.4.2-1.14:4.4.4-14:4.4.4-24:4.4.4-34:4.4.4-44:4.4.4-4~44:4.4.4-54:4.4.4-64:4.4.4-76:4.4.4-86:4.4.4-8+etch16:4.4.4-8+etch26:4.4.4-8+etch36:4.4.4-8+etch46:4.4.4-8+etch66:4.4.4-9	6:4.4.4-9+lenny1
`php` Red Hat:enterprise_linux:3::as	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-debuginfo` Red Hat:enterprise_linux:3::as	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-devel` Red Hat:enterprise_linux:3::as	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-imap` Red Hat:enterprise_linux:3::as	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-ldap` Red Hat:enterprise_linux:3::as	before 0:4.3.2-39.ent	0:4.3.2-39.ent

Show 188 moreShow less

Affected packages
Package	Affected	Fixed
`php-mysql` Red Hat:enterprise_linux:3::as	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-odbc` Red Hat:enterprise_linux:3::as	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-pgsql` Red Hat:enterprise_linux:3::as	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-debuginfo` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-devel` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-imap` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-ldap` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-mysql` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-odbc` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-pgsql` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php` Red Hat:enterprise_linux:3::es	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-debuginfo` Red Hat:enterprise_linux:3::es	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-devel` Red Hat:enterprise_linux:3::es	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-imap` Red Hat:enterprise_linux:3::es	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-ldap` Red Hat:enterprise_linux:3::es	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-mysql` Red Hat:enterprise_linux:3::es	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-odbc` Red Hat:enterprise_linux:3::es	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-pgsql` Red Hat:enterprise_linux:3::es	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-debuginfo` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-devel` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-imap` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-ldap` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-mysql` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-odbc` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php-pgsql` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-39.ent	0:4.3.2-39.ent
`php` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-debuginfo` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-devel` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-domxml` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-gd` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-imap` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-ldap` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-mbstring` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-mysql` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-ncurses` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-odbc` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-pear` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-pgsql` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-snmp` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-xmlrpc` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-debuginfo` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-devel` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-domxml` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-gd` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-imap` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-ldap` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-mbstring` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-mysql` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-ncurses` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-odbc` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-pear` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-pgsql` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-snmp` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-xmlrpc` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-debuginfo` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-devel` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-domxml` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-gd` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-imap` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-ldap` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-mbstring` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-mysql` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-ncurses` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-odbc` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-pear` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-pgsql` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-snmp` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-xmlrpc` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-debuginfo` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-devel` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-domxml` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-gd` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-imap` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-ldap` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-mbstring` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-mysql` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-ncurses` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-odbc` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-pear` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-pgsql` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-snmp` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php-xmlrpc` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.3	0:4.3.9-3.22.3
`php` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-devel` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-imap` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-ldap` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-manual` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-mysql` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-odbc` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-pgsql` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.14	0:4.1.2-2.14
`php` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-devel` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-imap` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-ldap` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-manual` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-mysql` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-odbc` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-pgsql` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.14	0:4.1.2-2.14
`php` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-devel` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-imap` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-ldap` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-manual` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-mysql` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-odbc` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-pgsql` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.14	0:4.1.2-2.14
`php` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-devel` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-imap` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-ldap` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-manual` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-mysql` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-odbc` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.14	0:4.1.2-2.14
`php-pgsql` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.14	0:4.1.2-2.14
`php` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-bcmath` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-cli` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-common` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-dba` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-debuginfo` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-devel` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-gd` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-imap` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-ldap` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-mbstring` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-mysql` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-ncurses` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-odbc` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-pdo` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-pgsql` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-snmp` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-soap` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-xml` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-xmlrpc` Red Hat:enterprise_linux:5::client_workstation	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-bcmath` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-cli` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-common` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-dba` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-debuginfo` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-devel` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-gd` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-imap` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-ldap` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-mbstring` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-mysql` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-ncurses` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-odbc` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-pdo` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-pgsql` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-snmp` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-soap` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-xml` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php-xmlrpc` Red Hat:enterprise_linux:5::server	before 0:5.1.6-7.el5	0:5.1.6-7.el5
`php` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-bcmath` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-cli` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-common` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-dba` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-debuginfo` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-devel` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-gd` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-imap` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-ldap` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-mbstring` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-mysql` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-ncurses` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-odbc` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-pdo` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-pgsql` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-snmp` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-soap` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-xml` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`php-xmlrpc` Red Hat:rhel_application_stack:1	before 0:5.1.6-3.el4s1.5	0:5.1.6-3.el4s1.5
`stronghold-php` Red Hat:rhel_stronghold:4.0	before 0:4.1.2-12	0:4.1.2-12
`stronghold-php-devel` Red Hat:rhel_stronghold:4.0	before 0:4.1.2-12	0:4.1.2-12
`stronghold-php-imap` Red Hat:rhel_stronghold:4.0	before 0:4.1.2-12	0:4.1.2-12
`stronghold-php-ldap` Red Hat:rhel_stronghold:4.0	before 0:4.1.2-12	0:4.1.2-12
`stronghold-php-manual` Red Hat:rhel_stronghold:4.0	before 0:4.1.2-12	0:4.1.2-12
`stronghold-php-mysql` Red Hat:rhel_stronghold:4.0	before 0:4.1.2-12	0:4.1.2-12
`stronghold-php-odbc` Red Hat:rhel_stronghold:4.0	before 0:4.1.2-12	0:4.1.2-12
`stronghold-php-pgsql` Red Hat:rhel_stronghold:4.0	before 0:4.1.2-12	0:4.1.2-12
`stronghold-php-snmp` Red Hat:rhel_stronghold:4.0	before 0:4.1.2-12	0:4.1.2-12

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	PHP < 4.4.5/5.2.1 - PHP_binary Session Deserialization Information Leak	2007-03-04

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	aliases
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-1380 is a medium vulnerability (CVSS 5.0) in Php, published March 10, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 9.43%, the 95th percentile. Fixed in php4 4:4.3.10-20.

References

Show 74 moreShow less