PHP ext/filter函数去除空格远程缓冲区溢出漏洞 CVE-2007-1453 CNNVD-200703-387 CNVD-2009-10046
7.5
AV
AC
AU
C
I
A
发布：
2007-03-14
修订：
2008-09-05
Buffer underflow in the PHP_FILTER_TRIM_DEFAULT macro in the filtering extension (ext/filter) in PHP 5.2.0 allows context-dependent attackers to execute arbitrary code by calling filter_var with certain modes such as FILTER_VALIDATE_INT, which causes filter to write a null byte in whitespace that precedes the buffer.
漏洞利用/PoC
当前有1条漏洞利用/PoC
受影响的平台与产品
当前有1条受影响产品信息
