CVE-2007-4783
The iconv_substr function in PHP 5.2.4 and earlier allows context-dependent attackers to cause (1...
The iconv_substr function in PHP 5.2.4 and earlier allows context-dependent attackers to cause (1) a denial of service (application crash) via a long string in the charset parameter, probably also requiring a long string in the str parameter; or (2) a denial of service (temporary application hang) via a long string in the str parameter. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.
Exploit likelihood
What each source reports
NVD Score used
The iconv_substr function in PHP 5.2.4 and earlier allows context-dependent attackers to cause (1) a denial of service (application crash) via a long string in the charset parameter, probably also requiring a long string in the str parameter; or (2) a denial of service (temporary application hang) via a long string in the str parameter. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.
- Record
CVE-2007-4783- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The iconv_substr function in PHP 5.2.4 and earlier allows context-dependent attackers to cause (1) a denial of service (application crash) via a long string in the charset parameter, probably also requiring a long string in the str parameter; or (2) a denial of service (temporary application hang) via a long string in the str parameter. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.
- Record
CVE-2007-4783- Updated
- 2026-11-02
EUVDEUVD-2007-4764 No score
The iconv_substr function in PHP 5.2.4 and earlier allows context-dependent attackers to cause (1) a denial of service (application crash) via a long string in the charset parameter, probably also requiring a long string in the str parameter; or (2) a denial of service (temporary application hang) via a long string in the str parameter. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.
- Record
EUVD-2007-4764- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-885x-fp24-cx7w No score
The iconv_substr function in PHP 5.2.4 and earlier allows context-dependent attackers to cause (1...
The iconv_substr function in PHP 5.2.4 and earlier allows context-dependent attackers to cause (1) a denial of service (application crash) via a long string in the charset parameter, probably also requiring a long string in the str parameter; or (2) a denial of service (temporary application hang) via a long string in the str parameter. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.
- Record
GHSA-885x-fp24-cx7w- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11167-1 No score
php7-7.4.24-1.1 on GA media
These are all security issues fixed in the php7-7.4.24-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11167-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:11169-1 No score
php8-8.0.11-1.1 on GA media
These are all security issues fixed in the php8-8.0.11-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:11169-1- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-4783 is a medium vulnerability (CVSS 5.0) in Php, published September 10, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.63%, the 89th percentile. No source names a fixed version.
References
securityreason.com/securityalert/3115
issues.rpath.com/browse/RPL-1943
gentoo.org/security/en/glsa/glsa-200710-02.xml
securityfocus.com/archive/1/478637/100/0/threaded
secunia.com/advisories/30040
Show 103 moreShow less
wiki.rpath.com/wiki/Advisories:rPSA-2007-0242
osvdb.org/38917
nvd.nist.gov/vuln/detail/CVE-2007-4783
github.com/advisories/GHSA-885x-fp24-cx7w
suse.com/security/cve/CVE-2005-3353