CVE-2007-1890
PHP 4 < 4.4.5 and PHP 5 < 5.2.1 - Integer Overflow in msg_receive Function
Title source: manualExploitation Summary
EIP tracks 1 public exploit for CVE-2007-1890. PoCs published by Stefan Esser.
AI-analyzed exploit summary This exploit targets an integer overflow vulnerability in PHP's msg_receive function, allowing arbitrary code execution via a buffer overflow. It demonstrates the issue by sending a malformed message to a message queue.
Description
Integer overflow in the msg_receive function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1, on FreeBSD and possibly other platforms, allows context-dependent attackers to execute arbitrary code via certain maxsize values, as demonstrated by 0xffffffff.
Exploits (1)
This exploit targets an integer overflow vulnerability in PHP's msg_receive function, allowing arbitrary code execution via a buffer overflow. It demonstrates the issue by sending a malformed message to a message queue.