CVE-2007-1886

PHP 4.4.5 and 5.2.1 - Integer Overflow in str_replace Function

Title source: llm

Description

Integer overflow in the str_replace function in PHP 4.4.5 and PHP 5.2.1 allows context-dependent attackers to have an unknown impact via a single character search string in conjunction with a single character replacement string, which causes an "off by one overflow."

References (8)

Core 8

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/33768

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2007/1991

Vendor Advisory vendor-advisory x_refsource_hp

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506

Vendor Advisory vendor-advisory x_refsource_hp

http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2007/2374

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/25423

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/25850

Patch, Vendor Advisory x_refsource_misc

http://www.php-security.org/MOPB/MOPB-39-2007.html

Scores

EPSS 0.0084

EPSS Percentile 75.0%

Details

Status published

Products (2)

php/php 4.4.5

php/php 5.2.1

Published Apr 06, 2007

Tracked Since Feb 18, 2026