Description

Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbitrary code by overwriting variables pointing to (1) the GLOBALS array or (2) the session data in _SESSION. NOTE: this issue was introduced when attempting to patch CVE-2007-1701 (MOPB-31-2007).

Remediation

References

CVE-2007-1711

Related Vulnerabilities

WordPress Plugin File Groups 'fgid' Parameter SQL Injection (1.1.2)

WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.15)

Django Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-12794)

WordPress Plugin Event Espresso Lite-Event Management and Registration System SQL Injection (3.1.37.11)

Oracle Application Server Credentials Management Errors Vulnerability (CVE-2002-2345)

Severity

Medium

Classification

CVE-2007-1711

Tags

Missing Update Known Vulnerabilities