CVE-2007-2728

The soap extension in PHP calls php_rand_r with an uninitialized seed variable, which has unknown impact and attack vectors, a related issue to the…

published May 16, 2007

CVSS
—
EPSS
3%
Percentile
86.7
In the wild
Unconfirmed
What it is

The soap extension in PHP calls php_rand_r with an uninitialized seed variable, which has unknown impact and attack vectors, a related issue to the mcrypt_create_iv issue covered by CVE-2007-2727. Note: The PHP team argue that this is not a valid security issue.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02880 · 86.7th percentile
Published
2007-05-16T22:00Z
EPSS history
Timeline
  • 16 MAY 22:00Z
    The soap extension in PHP calls php_rand_r with an uninitialized seed variable, which has unknown impact and attack vectors, a related issue to the…
    cvelistv5