CVE-2007-1411
PHP < 4.4.6 - Buffer Overflow via mssql_connect and mssql_pconnect Functions
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-1411. PoCs published by rgod.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in PHP's mssql_connect() and mssql_pconnect() functions (CVE-2007-1411). It uses a crafted payload to overwrite SEH and execute arbitrary shellcode, launching 'notepad.exe' as a proof of concept.
Description
Buffer overflow in PHP 4.4.6 and earlier, and unspecified PHP 5 versions, allows local and possibly remote attackers to execute arbitrary code via long server name arguments to the (1) mssql_connect and (2) mssql_pconnect functions.
Exploits (1)
This exploit targets a buffer overflow vulnerability in PHP's mssql_connect() and mssql_pconnect() functions (CVE-2007-1411). It uses a crafted payload to overwrite SEH and execute arbitrary shellcode, launching 'notepad.exe' as a proof of concept.