CVE-2007-4441
PHP < 5.2.0 - Buffer Overflow in win32std Extension via win_browse_file Function
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2007-4441. PoCs published by NetJackal, Inphex, boecke.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in the PHP win32std extension. It uses a hardcoded shellcode to execute arbitrary commands, specifically adding a user 'adm1n' with password 'netjackal' on Windows XP SP2.
Description
Buffer overflow in php_win32std.dll in the win32std extension for PHP 5.2.0 and earlier allows context-dependent attackers to execute arbitrary code via a long string in the filename argument to the win_browse_file function.
Exploits (3)
This exploit targets a buffer overflow vulnerability in the PHP win32std extension. It uses a hardcoded shellcode to execute arbitrary commands, specifically adding a user 'adm1n' with password 'netjackal' on Windows XP SP2.
This exploit targets a buffer overflow vulnerability in the win32std extension's win_browse_file function. It uses a bind shell shellcode to achieve remote code execution on Windows XP systems.
This exploit targets a buffer overflow vulnerability in the win32std extension for PHP versions up to 5.2.0. It uses a long string of NOP sleds (\x90) to trigger the overflow and potentially control EIP and EDX registers.