Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-1484. PoCs published by Stefan Esser.
AI-analyzed exploit summary This exploit targets a vulnerability in PHP 4/5's array_user_key_compare() function, leveraging a ZVAL destructor issue to achieve remote code execution. It uses a crafted array and shellcode to trigger a memory corruption vulnerability.
Description
The array_user_key_compare function in PHP 4.4.6 and earlier, and 5.x up to 5.2.1, makes erroneous calls to zval_dtor, which triggers memory corruption and allows local users to bypass safe_mode and execute arbitrary code via a certain unset operation after array_user_key_compare has been called.
Exploits (1)
This exploit targets a vulnerability in PHP 4/5's array_user_key_compare() function, leveraging a ZVAL destructor issue to achieve remote code execution. It uses a crafted array and shellcode to trigger a memory corruption vulnerability.