Input validation error in PHP - CVE-2007-4782

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU110364

Input validation error in PHP - CVE-2007-4782

Published: October 15, 2018 / Updated: June 8, 2025


Vulnerability identifier: #VU110364
CSH Severity: Medium
CVSS v4.0:
CVE-ID: CVE-2007-4782
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vendor: PHP Group
Affected software:
PHP

Detailed vulnerability description

The vulnerability allows context-dependent attackers to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can cause a denial of service (application crash) via (1) a long string in the pattern parameter to the glob function; or (2) a long string in the string parameter to the fnmatch function, accompanied by a pattern parameter value with undefined characteristics, as demonstrated by a "*[1]e" value.


How to mitigate CVE-2007-4782

Install update from vendor's website.

Sources