Main
Vulnerability Database
Exploits
ID:11556 - Exploit for Input validation error in PHP - CVE-2007-4441
ID:11556 - Exploit for Input validation error in PHP - CVE-2007-4441
Published: June 11, 2025
Vulnerability identifier: #VU110383
Vulnerability risk: Low
CVE-ID: CVE-2007-4441
CWE-ID: CWE-20
Exploitation vector: Local access
Vulnerable software:
PHP
PHP
Link to public exploit:
Vulnerability description
The vulnerability allows a local user to read and manipulate data.
Buffer overflow in php_win32std.dll in the win32std extension for PHP 5.2.0 and earlier allows context-dependent attackers to execute arbitrary code via a long string in the filename argument to the win_browse_file function.
Remediation
Install update from vendor's website.