VULNERABILITY INTELLIGENCE

CVE-2007-1584

CVSS score6.8 MEDIUM
EPSS probability5.32%
CISA KEVNot currently listed
Published2007-03-21
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

Buffer underflow in the header function in PHP 5.2.0 allows context-dependent attackers to execute arbitrary code by passing an all-whitespace string to this function, which causes it to write '\0' characters in whitespace that precedes the string.

Primary references