CVE-2007-1285

CVE Details

Release Date:	2007-03-06
Impact:	Moderate	What is this?

Description

The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PHP crash) via deeply nested arrays, which trigger deep recursion in the variable destruction routines. Unspecified vulnerability in PHP before 5.2.4 has unknown impact and attack vectors, related to an Improved fix for MOPB-03-2007, probably a variant of CVE-2007-1285.

See more information about CVE-2007-1285 from MITRE CVE dictionary and NIST NVD

NOTE: The following CVSS metrics and score provided are preliminary and subject to review.

CVSS v2 metrics

Base Score:	5.0
Vector String:	AV:N/AC:L/Au:N/C:N/I:N/A:P
Version:	2.0
Attack Vector:	Network
Attack Complexity:	Low
Authentication:	None
Confidentiality Impact:	None
Integrity Impact:	None
Availability Impact:	Partial

Errata information

Platform

Errata

Release Date