← Database

CVE-2007-1649

HIGH CVSS: 7.8 Published: 2007-03-24 Modified: 2026-06-16

Description

PHP 5.2.1 allows context-dependent attackers to read portions of heap memory by executing certain scripts with a serialized data input string beginning with S:, which does not properly track the number of input bytes being processed.

Affected Platforms

Php Php

Weakness Type

NVD-CWE-Other

References