CVE-2007-1711

Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbitrary code by overwriting variables…

published March 27, 2007

CVSS
—
EPSS
8%
Percentile
94.6
In the wild
Unconfirmed
What it is

Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbitrary code by overwriting variables pointing to (1) the GLOBALS array or (2) the session data in _SESSION. NOTE: this issue was introduced when attempting to patch CVE-2007-1701 (MOPB-31-2007).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07625 · 94.6th percentile
Published
2007-03-27T01:00Z
EPSS history
Timeline
  • 27 MAR 01:00Z
    Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbitrary code by overwriting variables…
    cvelistv5