CVE-2007-1475
PHP < 4.4.6 - Buffer Overflow in Interbase Extension ibase_connect and ibase_pconnect Functions
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-1475. PoCs published by rgod.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in PHP's ibase_connect() and ibase_pconnect() functions (CVE-2007-1475). It crafts a malicious string to overwrite SEH and execute arbitrary shellcode, launching 'cmd.exe /c start notepad' as a proof of concept.
Description
Multiple buffer overflows in the (1) ibase_connect and (2) ibase_pconnect functions in the interbase extension in PHP 4.4.6 and earlier allow context-dependent attackers to execute arbitrary code via a long argument.
Exploits (1)
This exploit targets a buffer overflow vulnerability in PHP's ibase_connect() and ibase_pconnect() functions (CVE-2007-1475). It crafts a malicious string to overwrite SEH and execute arbitrary shellcode, launching 'cmd.exe /c start notepad' as a proof of concept.