Description

Off-by-one error in the str_ireplace function in PHP 5.2.1 might allow context-dependent attackers to cause a denial of service (crash).

Remediation

References

CVE-2007-0911

Related Vulnerabilities

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9480)

WordPress Plugin WHIZZ Cross-Site Scripting (1.0.7)

Oracle Database Server Other Vulnerability (CVE-2005-3438)

YetiForce CRM Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2022-1411)

Dotclear Other Vulnerability (CVE-2006-2866)

Severity

High

Classification

CVE-2007-0911

Tags

Missing Update Known Vulnerabilities