CVE-2007-4840

描述

PHP 5.2.4 and earlier allows context-dependent attackers to cause a denial of service (application crash) via (1) a long string in the out_charset parameter to the iconv function; or a long string in the charset parameter to the (2) iconv_mime_decode_headers, (3) iconv_mime_decode, or (4) iconv_strlen function. NOTE: this might not be a vulnerability in most web server environments that support multiple threads, unless these issues can be demonstrated for code execution.

如何修補 CVE-2007-4840

要修補 CVE-2007-4840,請將受影響套件升級到下列已修補版本。

• Debian/glibc—升級至 2.7-1 或更新版本

CVE-2007-4840 正在被利用嗎?

低 — EPSS 為 3.2%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• from 0, < 2.7-1

參考連結(1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2007-4840