CVE-2007-3998

The wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the breakcharlen variable, which allows remote attackers to cause a…

published September 4, 2007

CVSS
—
EPSS
3%
Percentile
87.2
In the wild
Unconfirmed
What it is

The wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the breakcharlen variable, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash, or infinite loop) via certain arguments, as demonstrated by a 'chr(0), 0, ""' argument set.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02993 · 87.2th percentile
Published
2007-09-04T18:00Z
EPSS history
Timeline
  • 04 SEP 18:00Z
    The wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the breakcharlen variable, which allows remote attackers to cause a…
    cvelistv5