CVE-2007-0909

Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to (1) all of the *print functions on 64-bit systems, and (2) the odbc_result_all function.

Score
CVSS 2.0 7.5 High
Status
Modified - cve@mitre.org
Published
2007-02-13
Last modified
2024-08-07

Affected products

References