CoreCVE
Back

HIGH

Multiple buffer overflows in php_iisfunc.dll in the iisfunc extension for PHP 5.2.0 and earlier allow context-dependent attackers to execute arbitrary code, probably during Unicode conversion, as demonstrated by a long string in the first argument to the iis_getservicestate function, related to the ServiceId argument to the (1) fnStartService, (2) fnGetServiceState, (3) fnStopService, and possibly other functions

Published Aug 29, 2007

Description

Multiple buffer overflows in php_iisfunc.dll in the iisfunc extension for PHP 5.2.0 and earlier allow context-dependent attackers to execute arbitrary code, probably during Unicode conversion, as demonstrated by a long string in the first argument to the iis_getservicestate function, related to the ServiceId argument to the (1) fnStartService, (2) fnGetServiceState, (3) fnStopService, and possibly other functions.

Affected products

Remediation

Red Hat statement

Not vulnerable. This issue does not affect the versions of PHP shipped with Red Hat Enterprise Linux. It only affects the PHP version for Windows.

Metrics

Weaknesses (1)

CWE-119

Buffer Overflow

References (6)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Aug 29, 2007
Updated Aug 7, 2024
Reserved Aug 28, 2007
Link CVE-2007-4586
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 16, 2026
Link CVE-2007-4586
Red Hat
Severity n/a
Public date n/a
Links CVE-2007-4586