Description

Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unserialize function, which triggers the overflow in the ZVAL reference counter.

Remediation

References

CVE-2007-1286

Related Vulnerabilities

AngularJS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14863)

WordPress Plugin Catch Breadcrumb Security Bypass (1.6)

PostgreSQL Improper Control of Dynamically-Managed Code Resources Vulnerability (CVE-2022-2625)

Sqlite Integer Overflow or Wraparound Vulnerability (CVE-2025-29088)

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-2642)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2007-1286