CVE-2007-0909
Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute...
7.5 High
CVE-2007-0909 is a high vulnerability (CVSS 7.5) in Php, published February 13, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.38%, the 88th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 3.38%EPSS, 88th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to (1) all of the *print functions on 64-bit systems, and (2) the odbc_result_all function.
Exploit likelihood
3.38%Down 1.0 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
php4Debian:3.1 From an advisory covering 6 CVEs | before 4:4.3.10-19, plus listed versions 4:4.3.10-154:4.3.10-164:4.3.10-174:4.3.10-18 | 4:4.3.10-19 |
phpRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-develRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-imapRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-ldapRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-mysqlRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-odbcRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-pgsqlRed Hat:enterprise_linux:3::as From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
phpRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
Show 184 moreShow less
| Package | Affected | Fixed |
|---|---|---|
php-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-develRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-imapRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-ldapRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-mysqlRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-odbcRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-pgsqlRed Hat:enterprise_linux:3::desktop From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
phpRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-develRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-imapRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-ldapRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-mysqlRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-odbcRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-pgsqlRed Hat:enterprise_linux:3::es From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
phpRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-develRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-imapRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-ldapRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-mysqlRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-odbcRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
php-pgsqlRed Hat:enterprise_linux:3::ws From an advisory covering 9 CVEs | before 0:4.3.2-39.ent | 0:4.3.2-39.ent |
phpRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-develRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-domxmlRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-gdRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-imapRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-ldapRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-mbstringRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-mysqlRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-ncursesRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-odbcRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-pearRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-pgsqlRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-snmpRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-xmlrpcRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
phpRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-develRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-domxmlRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-gdRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-imapRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-ldapRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-mbstringRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-mysqlRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-ncursesRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-odbcRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-pearRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-pgsqlRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-snmpRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-xmlrpcRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
phpRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-develRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-domxmlRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-gdRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-imapRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-ldapRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-mbstringRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-mysqlRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-ncursesRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-odbcRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-pearRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-pgsqlRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-snmpRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-xmlrpcRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
phpRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-develRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-domxmlRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-gdRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-imapRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-ldapRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-mbstringRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-mysqlRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-ncursesRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-odbcRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-pearRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-pgsqlRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-snmpRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
php-xmlrpcRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:4.3.9-3.22.3 | 0:4.3.9-3.22.3 |
phpRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-develRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-imapRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-ldapRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-manualRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-mysqlRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-odbcRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-pgsqlRed Hat:enterprise_linux:2.1::as From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
phpRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-imapRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-ldapRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-manualRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-mysqlRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-odbcRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-pgsqlRed Hat:enterprise_linux:2.1::aw From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
phpRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-develRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-imapRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-ldapRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-manualRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-mysqlRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-odbcRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-pgsqlRed Hat:enterprise_linux:2.1::es From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
phpRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-imapRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-ldapRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-manualRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-mysqlRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-odbcRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
php-pgsqlRed Hat:enterprise_linux:2.1::ws From an advisory covering 9 CVEs | before 0:4.1.2-2.14 | 0:4.1.2-2.14 |
phpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-bcmathRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-cliRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-commonRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-dbaRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-gdRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-imapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-ldapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-mbstringRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-mysqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-ncursesRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-odbcRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-pdoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-pgsqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-snmpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-soapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-xmlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-xmlrpcRed Hat:enterprise_linux:5::client_workstation From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
phpRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-bcmathRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-cliRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-commonRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-dbaRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-develRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-gdRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-imapRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-ldapRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-mbstringRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-mysqlRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-ncursesRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-odbcRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-pdoRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-pgsqlRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-snmpRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-soapRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-xmlRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
php-xmlrpcRed Hat:enterprise_linux:5::server From an advisory covering 10 CVEs | before 0:5.1.6-7.el5 | 0:5.1.6-7.el5 |
phpRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-bcmathRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-cliRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-commonRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-dbaRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-debuginfoRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-develRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-gdRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-imapRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-ldapRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-mbstringRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-mysqlRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-ncursesRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-odbcRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-pdoRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-pgsqlRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-snmpRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-soapRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-xmlRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
php-xmlrpcRed Hat:rhel_application_stack:1 From an advisory covering 9 CVEs | before 0:5.1.6-3.el4s1.5 | 0:5.1.6-3.el4s1.5 |
stronghold-phpRed Hat:rhel_stronghold:4.0 From an advisory covering 9 CVEs | before 0:4.1.2-12 | 0:4.1.2-12 |
stronghold-php-develRed Hat:rhel_stronghold:4.0 From an advisory covering 9 CVEs | before 0:4.1.2-12 | 0:4.1.2-12 |
stronghold-php-imapRed Hat:rhel_stronghold:4.0 From an advisory covering 9 CVEs | before 0:4.1.2-12 | 0:4.1.2-12 |
stronghold-php-ldapRed Hat:rhel_stronghold:4.0 From an advisory covering 9 CVEs | before 0:4.1.2-12 | 0:4.1.2-12 |
stronghold-php-manualRed Hat:rhel_stronghold:4.0 From an advisory covering 9 CVEs | before 0:4.1.2-12 | 0:4.1.2-12 |
stronghold-php-mysqlRed Hat:rhel_stronghold:4.0 From an advisory covering 9 CVEs | before 0:4.1.2-12 | 0:4.1.2-12 |
stronghold-php-odbcRed Hat:rhel_stronghold:4.0 From an advisory covering 9 CVEs | before 0:4.1.2-12 | 0:4.1.2-12 |
stronghold-php-pgsqlRed Hat:rhel_stronghold:4.0 From an advisory covering 9 CVEs | before 0:4.1.2-12 | 0:4.1.2-12 |
stronghold-php-snmpRed Hat:rhel_stronghold:4.0 From an advisory covering 9 CVEs | before 0:4.1.2-12 | 0:4.1.2-12 |
What each source reports
NVD Score used
Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to (1) all of the *print functions on 64-bit systems, and (2) the odbc_result_all function.
- Record
CVE-2007-0909- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to (1) all of the *print functions on 64-bit systems, and (2) the odbc_result_all function.
- Record
CVE-2007-0909- Updated
- 2026-11-02
EUVDEUVD-2007-0903No score
Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to (1) all of the *print functions on 64-bit systems, and (2) the odbc_result_all function.
- Record
EUVD-2007-0903- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-57q9-cw6p-2qrgNo score
Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute...
Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to (1) all of the *print functions on 64-bit systems, and (2) the odbc_result_all function.
- Record
GHSA-57q9-cw6p-2qrg- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| aliases | ||
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
us.debian.org/security/2007/dsa-1264
secunia.com/advisories/24295
trustix.org/errata/2007/0009
openpkg.com/security/advisories/OpenPKG-SA-2007.010.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9722
Show 91 moreShow less
securitytracker.com/id?1017671
support.avaya.com/elmodocs2/security/ASA-2007-101.htm
securityfocus.com/bid/22496
issues.rpath.com/browse/RPL-1088
ubuntu.com/usn/usn-424-2
php.net/releases/5_2_1.php
security.gentoo.org/glsa/glsa-200703-21.xml
lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html
redhat.com/support/errata/RHSA-2007-0076.html
rhn.redhat.com/errata/RHSA-2007-0089.html
osvdb.org/32764
mandriva.com/security/advisories?name=MDKSA-2007:048
vupen.com/english/advisories/2007/0546
nvd.nist.gov/vuln/detail/CVE-2007-0909
github.com/advisories/GHSA-57q9-cw6p-2qrg
access.redhat.com/errata/RHSA-2007:0076
bugzilla.redhat.com/show_bug.cgi?id=228858
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0076.json
cve.org/CVERecord?id=CVE-2007-0906