CVE-2007-1887

Description

Buffer overflow in the sqlite_decode_binary function in the bundled sqlite library in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 allows context-dependent attackers to execute arbitrary code via an empty value of the in parameter, as demonstrated by calling the sqlite_udf_decode_binary function with a 0x01 character.

Weakness classification

• CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Primary references

• cve@mitre.org — Broken Link
• cve@mitre.org — Not Applicable
• cve@mitre.org — Not Applicable
• cve@mitre.org — Not Applicable
• cve@mitre.org — Not Applicable
• cve@mitre.org — Not Applicable
• cve@mitre.org — Not Applicable
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Third Party Advisory
• cve@mitre.org — Broken Link
• cve@mitre.org — Broken Link
• cve@mitre.org — Broken Link, Vendor Advisory