Description

Integer overflow in the msg_receive function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1, on FreeBSD and possibly other platforms, allows context-dependent attackers to execute arbitrary code via certain maxsize values, as demonstrated by 0xffffffff.

Remediation

References

CVE-2007-1890

Related Vulnerabilities

Magento Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2020-15151)

Apache Tomcat Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2020-13934)

PHP Resource Management Errors Vulnerability (CVE-2010-4697)

WebLogic CVE-2018-11039 Vulnerability (CVE-2018-11039)

Atlassian Jira URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-11589)

Severity

High

Classification

CVE-2007-1890

Tags

Missing Update Known Vulnerabilities