What’s Vulnerable › Vulnerabilities

CVE-2007-0909

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-02-13 · updated 2026-06-16

Description

Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to (1) all of the *print functions on 64-bit systems, and (2) the odbc_result_all function.

Affected products

• PHP: 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5 (+69)
• Trustix Secure Linux: 2.2, 3.0

References

• http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html
• http://osvdb.org/32764
• http://osvdb.org/32765
• http://rhn.redhat.com/errata/RHSA-2007-0089.html
• http://secunia.com/advisories/24089
• http://secunia.com/advisories/24195
• http://secunia.com/advisories/24217
• http://secunia.com/advisories/24236
• http://secunia.com/advisories/24248
• http://secunia.com/advisories/24284
• http://secunia.com/advisories/24295

Get alerted when CVE-2007-0909 or the next vulnerability affects your stack