Description

Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to (1) all of the *print functions on 64-bit systems, and (2) the odbc_result_all function.

Remediation

References

CVE-2007-0909

Related Vulnerabilities

Liferay Portal Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2025-62242)

WordPress Plugin Contact Form 7 Database Addon-CFDB7 Unspecified Vulnerability (1.2.5.7)

WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2025-61752)

WordPress Plugin Easy Contact Form Builder Cross-Site Scripting (1.0)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-42498)

Severity

High

Classification

CVE-2007-0909

Tags

Missing Update Known Vulnerabilities