Description

The setlocale function in PHP before 5.2.4 allows context-dependent attackers to cause a denial of service (application crash) via a long string in the locale parameter. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless this issue can be demonstrated for code execution.

Remediation

References

CVE-2007-4784

Related Vulnerabilities

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2011-1938)

WordPress Plugin WP Fastest Cache Unspecified Vulnerability (0.8.8.5)

MySQL CVE-2015-4905 Vulnerability (CVE-2015-4905)

WordPress Plugin WP STAGING WordPress Backup-Migration Backup Restore Cross-Site Scripting (2.9.17)

WordPress Plugin On Page SEO + Social Live Chat (Formerly OPS) Cross-Site Scripting (1.0.1)

Severity

Medium

Classification

CVE-2007-4784 CWE-20

Tags

Missing Update Known Vulnerabilities