HIGH
security flaw
Published Mar 28, 2007
7.8
HIGHCVSS 2.0
EPSS 6.69%
Description
CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote attackers to inject arbitrary e-mail headers and possibly conduct spam attacks via a control character immediately following folding of the (1) Subject or (2) To parameter, as demonstrated by a parameter containing a "\r\n\t\n" sequence, related to an increment bug in the SKIP_LONG_HEADER_SEP macro.
Affected products
No data.
OR
- 4.0
- 4.0
- 4.0
- 4.0
- 4.0
- 4.0
- 4.0
- 4.0
- 4.0.0
- 4.0.1
- 4.0.1
- 4.0.1
- 4.0.2
- 4.0.3
- 4.0.3
- 4.0.4
- 4.0.4
- 4.0.5
- 4.0.6
- 4.0.7
- 4.0.7
- 4.0.7
- 4.0.7
- 4.1.0
- 4.1.1
- 4.1.2
- 4.2
- 4.2.0
- 4.2.1
- 4.2.2
- 4.2.3
- 4.3.0
- 4.3.1
- 4.3.2
- 4.3.3
- 4.3.4
- 4.3.5
- 4.3.6
- 4.3.7
- 4.3.8
- 4.3.9
- 4.3.10
- 4.3.11
- 4.4.0
- 4.4.1
- 4.4.2
- 4.4.3
- 4.4.4
- 4.4.5
- 4.4.6
- 5.0
- 5.0
- 5.0
- 5.0.0
- 5.0.0
- 5.0.0
- 5.0.0
- 5.0.0
- 5.0.0
- 5.0.0
- 5.0.0
- 5.0.1
- 5.0.2
- 5.0.3
- 5.0.4
- 5.0.5
- 5.1.0
- 5.1.1
- 5.1.2
- 5.1.3
- 5.1.4
- 5.1.5
- 5.1.6
- 5.2.0
- 5.2.1
No data.
Red Hat Enterprise Linux 3
php-0:4.3.2-40.ent
Fixed · RHSA-2007:0155
Red Hat Enterprise Linux 4
php-0:4.3.9-3.22.4
Fixed · RHSA-2007:0155
Red Hat Enterprise Linux 5
php-0:5.1.6-11.el5
Fixed · RHSA-2007:0153
Red Hat Web Application Stack for RHEL 4
php-0:5.1.6-3.el4s1.6
Fixed · RHSA-2007:0162
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 3 | php-0:4.3.2-40.ent | Fixed | RHSA-2007:0155 |
| Red Hat Enterprise Linux 4 | php-0:4.3.9-3.22.4 | Fixed | RHSA-2007:0155 |
| Red Hat Enterprise Linux 5 | php-0:5.1.6-11.el5 | Fixed | RHSA-2007:0153 |
| Red Hat Web Application Stack for RHEL 4 | php-0:5.1.6-3.el4s1.6 | Fixed | RHSA-2007:0162 |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
No CVSS v3.0 score for this CVE.
7.8 HIGH NVD
AV:N/AC:L/Au:N/C:N/I:C/A:N
Access Vector Network
Access Complexity Low
Authentication None
Confidentiality Impact None
Integrity Impact Complete
Availability Impact None
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
6.69% 0.06689
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
EPSS probability 0.06689
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (29 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 6.69% (0.06689) | 93.70th | v5 (v2026.06.15) |
| Jun 15, 2026 | 6.69% (0.06689) | 93.03th | v5 (v2026.06.15) |
| Jun 7, 2026 | 21.72% (0.21722) | 95.85th | v4 (v2025.03.14) |
| Feb 28, 2026 | 24.03% (0.24031) | 95.92th | v4 (v2025.03.14) |
| Dec 28, 2025 | 21.83% (0.21829) | 95.57th | v4 (v2025.03.14) |
| Dec 27, 2025 | 16.12% (0.16120) | 94.60th | v4 (v2025.03.14) |
| Oct 28, 2025 | 21.52% (0.21518) | 95.46th | v4 (v2025.03.14) |
| Oct 27, 2025 | 15.87% (0.15869) | 94.47th | v4 (v2025.03.14) |
| Oct 1, 2025 | 21.52% (0.21518) | 95.55th | v4 (v2025.03.14) |
| Sep 25, 2025 | 15.87% (0.15869) | 94.52th | v4 (v2025.03.14) |
| Sep 21, 2025 | 13.98% (0.13981) | 94.12th | v4 (v2025.03.14) |
| Jul 30, 2025 | 17.28% (0.17281) | 94.76th | v4 (v2025.03.14) |
| May 15, 2025 | 15.57% (0.15575) | 94.29th | v4 (v2025.03.14) |
| Mar 30, 2025 | 16.78% (0.16781) | 94.38th | v4 (v2025.03.14) |
| Mar 29, 2025 | 21.86% (0.21855) | 93.09th | v4 (v2025.03.14) |
| Mar 17, 2025 | 17.25% (0.17253) | 94.52th | v4 (v2025.03.14) |
| Dec 12, 2024 | 2.42% (0.02421) | 90.34th | v3 (v2023.03.01) |
| May 23, 2024 | 2.42% (0.02421) | 89.95th | v3 (v2023.03.01) |
| Mar 8, 2024 | 2.32% (0.02322) | 89.44th | v3 (v2023.03.01) |
| Jan 29, 2024 | 1.27% (0.01272) | 84.25th | v3 (v2023.03.01) |
| Dec 22, 2023 | 1.52% (0.01515) | 85.56th | v3 (v2023.03.01) |
| Nov 14, 2023 | 0.89% (0.00886) | 80.70th | v3 (v2023.03.01) |
| Jul 22, 2023 | 0.83% (0.00834) | 79.80th | v3 (v2023.03.01) |
| May 9, 2023 | 0.92% (0.00916) | 80.54th | v3 (v2023.03.01) |
| Apr 2, 2023 | 0.87% (0.00871) | 79.97th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.80% (0.00805) | 79.06th | v3 (v2023.03.01) |
| Mar 6, 2023 | 4.36% (0.04358) | 88.02th | v2 (v2022.01.01) |
| Apr 1, 2022 | 4.36% (0.04358) | 86.83th | v2 (v2022.01.01) |
| Feb 4, 2022 | 4.36% (0.04358) | 70.59th | v2 (v2022.01.01) |
Weaknesses (0)
No CWE recorded.
References (30)
- http://rhn.redhat.com/errata/RHSA-2007-0155.html vendor-advisoryx_refsource_REDHAT
- http://secunia.com/advisories/24909 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/24924 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/24965 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/25025 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/25056 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/25057 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/25062 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/25445 third-party-advisoryx_refsource_SECUNIA
- http://security.gentoo.org/glsa/glsa-200705-19.xml vendor-advisoryx_refsource_GENTOO
- http://us2.php.net/releases/5_2_2.php x_refsource_CONFIRM
- http://www.debian.org/security/2007/dsa-1282 vendor-advisoryx_refsource_DEBIAN
- http://www.debian.org/security/2007/dsa-1283 vendor-advisoryx_refsource_DEBIAN
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:087 vendor-advisoryx_refsource_MANDRIVA
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:088 vendor-advisoryx_refsource_MANDRIVA
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:089 vendor-advisoryx_refsource_MANDRIVA
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:090 vendor-advisoryx_refsource_MANDRIVA
- http://www.novell.com/linux/security/advisories/2007_32_php.html vendor-advisoryx_refsource_SUSE
- http://www.php-security.org/MOPB/MOPB-34-2007.html x_refsource_MISCExploit
- http://www.redhat.com/support/errata/RHSA-2007-0153.html vendor-advisoryx_refsource_REDHAT
- http://www.redhat.com/support/errata/RHSA-2007-0162.html vendor-advisoryx_refsource_REDHAT
- http://www.securityfocus.com/bid/23145 vdb-entryx_refsource_BIDExploit
- http://www.securitytracker.com/id?1017946 vdb-entryx_refsource_SECTRACK
- http://www.ubuntu.com/usn/usn-455-1 vendor-advisoryx_refsource_UBUNTU
- https://access.redhat.com/security/cve/CVE-2007-1718 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1618306 Issue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33516 vdb-entryx_refsource_XF
- https://nvd.nist.gov/vuln/detail/CVE-2007-1718
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10951 vdb-entrysignaturex_refsource_OVAL
- https://www.cve.org/CVERecord?id=CVE-2007-1718
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Mar 28, 2007
Updated Aug 7, 2024
Reserved Mar 27, 2007
Link CVE-2007-1718
CISA Vulnrichment
Updated n/a