CVE-2007-4782
PHP before 5.2.3 allows context-dependent attackers to cause a denial of service (application...
CVE-2007-4782 is a medium vulnerability (CVSS 5.0) in Php, published September 10, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.70%, the 91st percentile. No source names a fixed version.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 4.70%EPSS, 91st percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
PHP before 5.2.3 allows context-dependent attackers to cause a denial of service (application crash) via (1) a long string in the pattern parameter to the glob function; or (2) a long string in the string parameter to the fnmatch function, accompanied by a pattern parameter value with undefined characteristics, as demonstrated by a "*[1]e" value. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
httpdRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:2.2.8-1.el5s2 | 0:2.2.8-1.el5s2 |
httpd-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:2.2.8-1.el5s2 | 0:2.2.8-1.el5s2 |
httpd-develRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:2.2.8-1.el5s2 | 0:2.2.8-1.el5s2 |
httpd-manualRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:2.2.8-1.el5s2 | 0:2.2.8-1.el5s2 |
mod_jkRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:1.2.26-1.el5s2 | 0:1.2.26-1.el5s2 |
mod_jk-ap20Red Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:1.2.26-1.el5s2 | 0:1.2.26-1.el5s2 |
mod_jk-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:1.2.26-1.el5s2 | 0:1.2.26-1.el5s2 |
mod_perlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:2.0.4-3.el5s2 | 0:2.0.4-3.el5s2 |
mod_perl-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:2.0.4-3.el5s2 | 0:2.0.4-3.el5s2 |
mod_perl-develRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:2.0.4-3.el5s2 | 0:2.0.4-3.el5s2 |
Show 211 moreShow less
| Package | Affected | Fixed |
|---|---|---|
mod_sslRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 1:2.2.8-1.el5s2 | 1:2.2.8-1.el5s2 |
mysqlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.0.50sp1a-2.el5s2 | 0:5.0.50sp1a-2.el5s2 |
mysql-benchRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.0.50sp1a-2.el5s2 | 0:5.0.50sp1a-2.el5s2 |
mysql-clusterRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.0.50sp1a-2.el5s2 | 0:5.0.50sp1a-2.el5s2 |
mysql-connector-odbcRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:3.51.24r1071-1.el5s2 | 0:3.51.24r1071-1.el5s2 |
mysql-connector-odbc-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:3.51.24r1071-1.el5s2 | 0:3.51.24r1071-1.el5s2 |
mysql-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.0.50sp1a-2.el5s2 | 0:5.0.50sp1a-2.el5s2 |
mysql-develRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.0.50sp1a-2.el5s2 | 0:5.0.50sp1a-2.el5s2 |
mysql-jdbcRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.0.8-1jpp.1.el5s2 | 0:5.0.8-1jpp.1.el5s2 |
mysql-libsRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.0.50sp1a-2.el5s2 | 0:5.0.50sp1a-2.el5s2 |
mysql-serverRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.0.50sp1a-2.el5s2 | 0:5.0.50sp1a-2.el5s2 |
mysql-testRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.0.50sp1a-2.el5s2 | 0:5.0.50sp1a-2.el5s2 |
perl-DBD-MySQLRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:4.006-1.el5s2 | 0:4.006-1.el5s2 |
perl-DBD-MySQL-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:4.006-1.el5s2 | 0:4.006-1.el5s2 |
perl-DBIRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:1.604-1.el5s2 | 0:1.604-1.el5s2 |
perl-DBI-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:1.604-1.el5s2 | 0:1.604-1.el5s2 |
phpRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-bcmathRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-cliRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-commonRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-dbaRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-develRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-gdRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-imapRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-ldapRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-mbstringRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-mysqlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-ncursesRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-odbcRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-pdoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-pgsqlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-snmpRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-soapRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-xmlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
php-xmlrpcRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:5.2.6-2.el5s2 | 0:5.2.6-2.el5s2 |
postgresqlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.9-1.el5s2 | 0:8.2.9-1.el5s2 |
postgresql-contribRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.9-1.el5s2 | 0:8.2.9-1.el5s2 |
postgresql-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.9-1.el5s2 | 0:8.2.9-1.el5s2 |
postgresql-develRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.9-1.el5s2 | 0:8.2.9-1.el5s2 |
postgresql-docsRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.9-1.el5s2 | 0:8.2.9-1.el5s2 |
postgresql-jdbcRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.508-1jpp.el5s2 | 0:8.2.508-1jpp.el5s2 |
postgresql-jdbc-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.508-1jpp.el5s2 | 0:8.2.508-1jpp.el5s2 |
postgresql-libsRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.9-1.el5s2 | 0:8.2.9-1.el5s2 |
postgresql-odbcRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:08.02.0500-1.el5s2 | 0:08.02.0500-1.el5s2 |
postgresql-odbc-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:08.02.0500-1.el5s2 | 0:08.02.0500-1.el5s2 |
postgresql-plperlRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.9-1.el5s2 | 0:8.2.9-1.el5s2 |
postgresql-plpythonRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.9-1.el5s2 | 0:8.2.9-1.el5s2 |
postgresql-pltclRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.9-1.el5s2 | 0:8.2.9-1.el5s2 |
postgresql-pythonRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.9-1.el5s2 | 0:8.2.9-1.el5s2 |
postgresql-serverRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.9-1.el5s2 | 0:8.2.9-1.el5s2 |
postgresql-tclRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.9-1.el5s2 | 0:8.2.9-1.el5s2 |
postgresql-testRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.2.9-1.el5s2 | 0:8.2.9-1.el5s2 |
postgresqlclient81Red Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.1.11-1.el5s2 | 0:8.1.11-1.el5s2 |
postgresqlclient81-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:8.1.11-1.el5s2 | 0:8.1.11-1.el5s2 |
unixODBCRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:2.2.12-8.el5s2 | 0:2.2.12-8.el5s2 |
unixODBC-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:2.2.12-8.el5s2 | 0:2.2.12-8.el5s2 |
unixODBC-develRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:2.2.12-8.el5s2 | 0:2.2.12-8.el5s2 |
unixODBC-kdeRed Hat:rhel_application_stack:2 From an advisory covering 8 CVEs | before 0:2.2.12-8.el5s2 | 0:2.2.12-8.el5s2 |
phpRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-develRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-imapRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-ldapRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-mysqlRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-odbcRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-pgsqlRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
phpRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-develRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-imapRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-ldapRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-mysqlRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-odbcRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-pgsqlRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
phpRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-develRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-imapRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-ldapRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-mysqlRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-odbcRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-pgsqlRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
phpRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-develRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-imapRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-ldapRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-mysqlRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-odbcRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
php-pgsqlRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs | before 0:4.3.2-48.ent | 0:4.3.2-48.ent |
phpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-bcmathRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-cliRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-commonRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-dbaRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-gdRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-imapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-ldapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-mbstringRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-mysqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-ncursesRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-odbcRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-pdoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-pgsqlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-snmpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-soapRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-xmlRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-xmlrpcRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
phpRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-bcmathRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-cliRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-commonRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-dbaRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-develRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-gdRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-imapRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-ldapRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-mbstringRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-mysqlRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-ncursesRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-odbcRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-pdoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-pgsqlRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-snmpRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-soapRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-xmlRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
php-xmlrpcRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs | before 0:5.1.6-20.el5_2.1 | 0:5.1.6-20.el5_2.1 |
phpRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-develRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-domxmlRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-gdRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-imapRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-ldapRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-mbstringRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-mysqlRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-ncursesRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-odbcRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-pearRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-pgsqlRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-snmpRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-xmlrpcRed Hat:enterprise_linux:4::as From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
phpRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-develRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-domxmlRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-gdRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-imapRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-ldapRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-mbstringRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-mysqlRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-ncursesRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-odbcRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-pearRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-pgsqlRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-snmpRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-xmlrpcRed Hat:enterprise_linux:4::desktop From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
phpRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-develRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-domxmlRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-gdRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-imapRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-ldapRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-mbstringRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-mysqlRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-ncursesRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-odbcRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-pearRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-pgsqlRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-snmpRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-xmlrpcRed Hat:enterprise_linux:4::es From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
phpRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-develRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-domxmlRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-gdRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-imapRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-ldapRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-mbstringRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-mysqlRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-ncursesRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-odbcRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-pearRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-pgsqlRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-snmpRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
php-xmlrpcRed Hat:enterprise_linux:4::ws From an advisory covering 6 CVEs | before 0:4.3.9-3.22.12 | 0:4.3.9-3.22.12 |
phpRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs | before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-bcmathRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs | before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-cliRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs | before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-commonRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs | before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-dbaRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs | before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-debuginfoRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs | before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-develRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs | before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-gdRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs | before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-imapRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs | before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-ldapRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs | before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-mbstringRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs | before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-mysqlRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs | before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-ncursesRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs | before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-odbcRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs | before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-pdoRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs | before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-pgsqlRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs | before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-snmpRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs | before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-soapRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs | before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-xmlRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs | before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
php-xmlrpcRed Hat:rhel_application_stack:1 From an advisory covering 6 CVEs | before 0:5.1.6-3.el4s1.10 | 0:5.1.6-3.el4s1.10 |
What each source reports
NVD Score used 5.0
PHP before 5.2.3 allows context-dependent attackers to cause a denial of service (application crash) via (1) a long string in the pattern parameter to the glob function; or (2) a long string in the string parameter to the fnmatch function, accompanied by a pattern parameter value with undefined characteristics, as demonstrated by a "*[1]e" value. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.
- Record
CVE-2007-4782- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE ListNo score
PHP before 5.2.3 allows context-dependent attackers to cause a denial of service (application crash) via (1) a long string in the pattern parameter to the glob function; or (2) a long string in the string parameter to the fnmatch function, accompanied by a pattern parameter value with undefined characteristics, as demonstrated by a "*[1]e" value. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.
- Record
CVE-2007-4782- Updated
- 2026-11-02
EUVDEUVD-2007-4763No score
PHP before 5.2.3 allows context-dependent attackers to cause a denial of service (application crash) via (1) a long string in the pattern parameter to the glob function; or (2) a long string in the string parameter to the fnmatch function, accompanied by a pattern parameter value with undefined characteristics, as demonstrated by a "*[1]e" value. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.
- Record
EUVD-2007-4763- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9q3v-wm75-qjw9No score
PHP before 5.2.3 allows context-dependent attackers to cause a denial of service (application...
PHP before 5.2.3 allows context-dependent attackers to cause a denial of service (application crash) via (1) a long string in the pattern parameter to the glob function; or (2) a long string in the string parameter to the fnmatch function, accompanied by a pattern parameter value with undefined characteristics, as demonstrated by a "*[1]e" value. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.
- Record
GHSA-9q3v-wm75-qjw9- Weakness
- CWE-94
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
redhat.com/archives/fedora-package-announce/2008-June/msg00773.html
lists.opensuse.org/opensuse-security-announce/2008-01/msg00006.html
secunia.com/advisories/28658
secunia.com/advisories/30828
redhat.com/support/errata/RHSA-2008-0582.html
gentoo.org/security/en/glsa/glsa-200710-02.xml
Show 62 moreShow less
ubuntu.com/usn/usn-628-1
securityfocus.com/archive/1/478626/100/0/threaded
redhat.com/support/errata/RHSA-2008-0545.html
secunia.com/advisories/31119
mandriva.com/security/advisories?name=MDVSA-2009:023
mandriva.com/security/advisories?name=MDVSA-2009:022
exchange.xforce.ibmcloud.com/vulnerabilities/36457
secunia.com/advisories/31200
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10897
redhat.com/support/errata/RHSA-2008-0544.html
osvdb.org/38686
exchange.xforce.ibmcloud.com/vulnerabilities/36461
secunia.com/advisories/27102
securityfocus.com/archive/1/478630/100/0/threaded
redhat.com/support/errata/RHSA-2008-0505.html
securityreason.com/securityalert/3109
securityfocus.com/archive/1/478726/100/0/threaded
nvd.nist.gov/vuln/detail/CVE-2007-4782
github.com/advisories/GHSA-9q3v-wm75-qjw9
access.redhat.com/errata/RHSA-2008:0505
access.redhat.com/security/updates/classification
redhat.com/docs/en-US/Red_Hat_Application_Stack/2.1/html-single/Release_Notes
bugzilla.redhat.com/show_bug.cgi?id=285881
bugzilla.redhat.com/show_bug.cgi?id=382411
bugzilla.redhat.com/show_bug.cgi?id=382431
bugzilla.redhat.com/show_bug.cgi?id=445003
bugzilla.redhat.com/show_bug.cgi?id=445006
bugzilla.redhat.com/show_bug.cgi?id=445222
bugzilla.redhat.com/show_bug.cgi?id=445684
bugzilla.redhat.com/show_bug.cgi?id=445685
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0505.json
access.redhat.com/security/cve/CVE-2007-4782
cve.org/CVERecord?id=CVE-2007-4782
access.redhat.com/security/cve/CVE-2007-5898
cve.org/CVERecord?id=CVE-2007-5898
nvd.nist.gov/vuln/detail/CVE-2007-5898
access.redhat.com/security/cve/CVE-2007-5899
cve.org/CVERecord?id=CVE-2007-5899
nvd.nist.gov/vuln/detail/CVE-2007-5899
access.redhat.com/security/cve/CVE-2008-0599
cve.org/CVERecord?id=CVE-2008-0599
nvd.nist.gov/vuln/detail/CVE-2008-0599
access.redhat.com/security/cve/CVE-2008-2051
cve.org/CVERecord?id=CVE-2008-2051
nvd.nist.gov/vuln/detail/CVE-2008-2051
access.redhat.com/security/cve/CVE-2008-2079
cve.org/CVERecord?id=CVE-2008-2079
nvd.nist.gov/vuln/detail/CVE-2008-2079
access.redhat.com/security/cve/CVE-2008-2107
cve.org/CVERecord?id=CVE-2008-2107
nvd.nist.gov/vuln/detail/CVE-2008-2107
access.redhat.com/security/cve/CVE-2008-2108
cve.org/CVERecord?id=CVE-2008-2108
nvd.nist.gov/vuln/detail/CVE-2008-2108
access.redhat.com/errata/RHSA-2008:0544
redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0544.json
access.redhat.com/errata/RHSA-2008:0545
bugzilla.redhat.com/show_bug.cgi?id=263501
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0545.json
access.redhat.com/errata/RHSA-2008:0582
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0582.json