What’s Vulnerable › Vulnerabilities

CVE-2007-2511

• Severity: high (CVSS 7.2 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-05-09 · updated 2026-06-16

Description

Buffer overflow in the user_filter_factory_create function in PHP before 5.2.2 has unknown impact and local attack vectors.

Affected products

• PHP: 4.0.0, 4.0.1, 4.0.1-patch1, 4.0.1-patch2, 4.0.2, 4.0.3 (+39)

References

• http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html
• http://osvdb.org/34676
• http://secunia.com/advisories/25191
• http://secunia.com/advisories/25255
• http://secunia.com/advisories/25372
• http://secunia.com/advisories/25445
• http://secunia.com/advisories/26048
• http://security.gentoo.org/glsa/glsa-200705-19.xml
• http://us2.php.net/releases/5_2_2.php
• http://viewcvs.php.net/viewvc.cgi/php-src/ext/standard/user_filters.c?r1=1.31.2.4.2.5&r2=1.31.2.4.2.6
• http://www.mandriva.com/security/advisories?name=MDKSA-2007:102
• http://www.trustix.org/errata/2007/0017/

Get alerted when CVE-2007-2511 or the next vulnerability affects your stack