CVE-2007-1711

Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent...

6.8 MediumPublic exploitFix available

Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbitrary code by overwriting variables pointing to (1) the GLOBALS array or (2) the session data in _SESSION. NOTE: this issue was introduced when attempting to patch CVE-2007-1701 (MOPB-31-2007).

Exploit likelihood

7.73%Down 20.3 points since Feb 4, 2022

What each source reports

NVD Score used 6.8

Record: CVE-2007-1711
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2007-1711
Updated: 2026-11-02

EUVDEUVD-2007-1705 No score

Record: EUVD-2007-1705
Updated: 2026-11-03

GitHub AdvisoriesGHSA-g7q5-7w4c-7v63 No score

Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent...

Record: GHSA-g7q5-7w4c-7v63
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`php4` Debian:3.1	before 4:4.3.10-20, plus listed versions 4:4.3.10-154:4.3.10-164:4.3.10-174:4.3.10-184:4.3.10-19	4:4.3.10-20
`php4` Debian:4.0	before 6:4.4.4-8+etch2, plus listed versions 6:4.4.4-8+etch1	6:4.4.4-8+etch2
`php5` Debian:4.0	before 5.2.0-8+etch3, plus listed versions 5.2.0-8+etch1	5.2.0-8+etch3
`php` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.17	0:4.1.2-2.17
`php-devel` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.17	0:4.1.2-2.17
`php-imap` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.17	0:4.1.2-2.17
`php-ldap` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.17	0:4.1.2-2.17
`php-manual` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.17	0:4.1.2-2.17
`php-mysql` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.17	0:4.1.2-2.17
`php-odbc` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.17	0:4.1.2-2.17

Show 126 moreShow less

Affected packages
Package	Affected	Fixed
`php-pgsql` Red Hat:enterprise_linux:2.1::as	before 0:4.1.2-2.17	0:4.1.2-2.17
`php` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.17	0:4.1.2-2.17
`php-devel` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.17	0:4.1.2-2.17
`php-imap` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.17	0:4.1.2-2.17
`php-ldap` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.17	0:4.1.2-2.17
`php-manual` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.17	0:4.1.2-2.17
`php-mysql` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.17	0:4.1.2-2.17
`php-odbc` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.17	0:4.1.2-2.17
`php-pgsql` Red Hat:enterprise_linux:2.1::aw	before 0:4.1.2-2.17	0:4.1.2-2.17
`php` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.17	0:4.1.2-2.17
`php-devel` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.17	0:4.1.2-2.17
`php-imap` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.17	0:4.1.2-2.17
`php-ldap` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.17	0:4.1.2-2.17
`php-manual` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.17	0:4.1.2-2.17
`php-mysql` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.17	0:4.1.2-2.17
`php-odbc` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.17	0:4.1.2-2.17
`php-pgsql` Red Hat:enterprise_linux:2.1::es	before 0:4.1.2-2.17	0:4.1.2-2.17
`php` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.17	0:4.1.2-2.17
`php-devel` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.17	0:4.1.2-2.17
`php-imap` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.17	0:4.1.2-2.17
`php-ldap` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.17	0:4.1.2-2.17
`php-manual` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.17	0:4.1.2-2.17
`php-mysql` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.17	0:4.1.2-2.17
`php-odbc` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.17	0:4.1.2-2.17
`php-pgsql` Red Hat:enterprise_linux:2.1::ws	before 0:4.1.2-2.17	0:4.1.2-2.17
`php` Red Hat:enterprise_linux:3::as	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php-debuginfo` Red Hat:enterprise_linux:3::as	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php-devel` Red Hat:enterprise_linux:3::as	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php-imap` Red Hat:enterprise_linux:3::as	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php-ldap` Red Hat:enterprise_linux:3::as	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php-mysql` Red Hat:enterprise_linux:3::as	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php-odbc` Red Hat:enterprise_linux:3::as	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php-pgsql` Red Hat:enterprise_linux:3::as	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php-debuginfo` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php-devel` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php-imap` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php-ldap` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php-mysql` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php-odbc` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php-pgsql` Red Hat:enterprise_linux:3::desktop	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php` Red Hat:enterprise_linux:3::es	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php-debuginfo` Red Hat:enterprise_linux:3::es	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php-devel` Red Hat:enterprise_linux:3::es	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php-imap` Red Hat:enterprise_linux:3::es	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php-ldap` Red Hat:enterprise_linux:3::es	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php-mysql` Red Hat:enterprise_linux:3::es	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php-odbc` Red Hat:enterprise_linux:3::es	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php-pgsql` Red Hat:enterprise_linux:3::es	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php-debuginfo` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php-devel` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php-imap` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php-ldap` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php-mysql` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php-odbc` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php-pgsql` Red Hat:enterprise_linux:3::ws	before 0:4.3.2-40.ent	0:4.3.2-40.ent
`php` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-debuginfo` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-devel` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-domxml` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-gd` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-imap` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-ldap` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-mbstring` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-mysql` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-ncurses` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-odbc` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-pear` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-pgsql` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-snmp` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-xmlrpc` Red Hat:enterprise_linux:4::as	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-debuginfo` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-devel` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-domxml` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-gd` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-imap` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-ldap` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-mbstring` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-mysql` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-ncurses` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-odbc` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-pear` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-pgsql` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-snmp` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-xmlrpc` Red Hat:enterprise_linux:4::desktop	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-debuginfo` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-devel` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-domxml` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-gd` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-imap` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-ldap` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-mbstring` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-mysql` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-ncurses` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-odbc` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-pear` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-pgsql` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-snmp` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-xmlrpc` Red Hat:enterprise_linux:4::es	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-debuginfo` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-devel` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-domxml` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-gd` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-imap` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-ldap` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-mbstring` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-mysql` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-ncurses` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-odbc` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-pear` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-pgsql` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-snmp` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`php-xmlrpc` Red Hat:enterprise_linux:4::ws	before 0:4.3.9-3.22.4	0:4.3.9-3.22.4
`stronghold-php` Red Hat:rhel_stronghold:4.0	before 0:4.1.2-15	0:4.1.2-15
`stronghold-php-devel` Red Hat:rhel_stronghold:4.0	before 0:4.1.2-15	0:4.1.2-15
`stronghold-php-imap` Red Hat:rhel_stronghold:4.0	before 0:4.1.2-15	0:4.1.2-15
`stronghold-php-ldap` Red Hat:rhel_stronghold:4.0	before 0:4.1.2-15	0:4.1.2-15
`stronghold-php-manual` Red Hat:rhel_stronghold:4.0	before 0:4.1.2-15	0:4.1.2-15
`stronghold-php-mysql` Red Hat:rhel_stronghold:4.0	before 0:4.1.2-15	0:4.1.2-15
`stronghold-php-odbc` Red Hat:rhel_stronghold:4.0	before 0:4.1.2-15	0:4.1.2-15
`stronghold-php-pgsql` Red Hat:rhel_stronghold:4.0	before 0:4.1.2-15	0:4.1.2-15
`stronghold-php-snmp` Red Hat:rhel_stronghold:4.0	before 0:4.1.2-15	0:4.1.2-15

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	PHP 4.4.5/4.4.6 - 'session_decode()' Double-Free (PoC)	2007-03-27

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	aliases
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-1711 is a medium vulnerability (CVSS 6.8) in Php, published March 27, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.73%, the 94th percentile. Fixed in php4 4:4.3.10-20.

References

Show 60 moreShow less