CVE-2007-1379

The ovrimos_close function in the Ovrimos extension for PHP before 4.4.5 can trigger efree of an arbitrary address, which might allow context-dependent attackers to execute arbitrary code.

Score

CVSS 2.0 5.1 Medium

Status

Modified - cve@mitre.org

Published

2007-03-10

Last modified

2024-08-07

Affected products

• Php (Php)

References

• http://www.osvdb.org/34691
• http://www.php-security.org/MOPB/MOPB-13-2007.html
• http://www.securityfocus.com/bid/22833