Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-vtb3-na5h-cyd9
Summary
PHP contains several vulnerabilities including buffer and integer overflows
    which could under certain conditions lead to the remote execution of
    arbitrary code.
Aliases
0
alias CVE-2007-1864
Fixed_packages
0
url pkg:ebuild/dev-lang/php@5.2.2
purl pkg:ebuild/dev-lang/php@5.2.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/dev-lang/php@5.2.2
Affected_packages
0
url pkg:rpm/redhat/php@4.3.9-3.22?arch=5
purl pkg:rpm/redhat/php@4.3.9-3.22?arch=5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-e4df-fp6n-r3cf
1
vulnerability VCID-vtb3-na5h-cyd9
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/php@4.3.9-3.22%3Farch=5
1
url pkg:rpm/redhat/php@5.1.6-3.el4s1?arch=7
purl pkg:rpm/redhat/php@5.1.6-3.el4s1?arch=7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-e4df-fp6n-r3cf
1
vulnerability VCID-sgcz-171h-eyba
2
vulnerability VCID-vtb3-na5h-cyd9
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/php@5.1.6-3.el4s1%3Farch=7
2
url pkg:rpm/redhat/php@5.1.6-12?arch=el5
purl pkg:rpm/redhat/php@5.1.6-12?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-e4df-fp6n-r3cf
1
vulnerability VCID-sgcz-171h-eyba
2
vulnerability VCID-vtb3-na5h-cyd9
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/php@5.1.6-12%3Farch=el5
References
0
reference_url http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html
reference_id
reference_type
scores
url http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.html
1
reference_url http://osvdb.org/34674
reference_id
reference_type
scores
url http://osvdb.org/34674
2
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1864.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-1864.json
3
reference_url https://api.first.org/data/v1/epss?cve=CVE-2007-1864
reference_id
reference_type
scores
0
value 0.07751
scoring_system epss
scoring_elements 0.91957
published_at 2026-04-21T12:55:00Z
1
value 0.07751
scoring_system epss
scoring_elements 0.91904
published_at 2026-04-01T12:55:00Z
2
value 0.07751
scoring_system epss
scoring_elements 0.91912
published_at 2026-04-02T12:55:00Z
3
value 0.07751
scoring_system epss
scoring_elements 0.91919
published_at 2026-04-04T12:55:00Z
4
value 0.07751
scoring_system epss
scoring_elements 0.91926
published_at 2026-04-07T12:55:00Z
5
value 0.07751
scoring_system epss
scoring_elements 0.91939
published_at 2026-04-08T12:55:00Z
6
value 0.07751
scoring_system epss
scoring_elements 0.91944
published_at 2026-04-09T12:55:00Z
7
value 0.07751
scoring_system epss
scoring_elements 0.91947
published_at 2026-04-11T12:55:00Z
8
value 0.07751
scoring_system epss
scoring_elements 0.91946
published_at 2026-04-12T12:55:00Z
9
value 0.07751
scoring_system epss
scoring_elements 0.91943
published_at 2026-04-13T12:55:00Z
10
value 0.07751
scoring_system epss
scoring_elements 0.91963
published_at 2026-04-16T12:55:00Z
11
value 0.07751
scoring_system epss
scoring_elements 0.9196
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2007-1864
4
reference_url http://secunia.com/advisories/25187
reference_id
reference_type
scores
url http://secunia.com/advisories/25187
5
reference_url http://secunia.com/advisories/25191
reference_id
reference_type
scores
url http://secunia.com/advisories/25191
6
reference_url http://secunia.com/advisories/25255
reference_id
reference_type
scores
url http://secunia.com/advisories/25255
7
reference_url http://secunia.com/advisories/25445
reference_id
reference_type
scores
url http://secunia.com/advisories/25445
8
reference_url http://secunia.com/advisories/25660
reference_id
reference_type
scores
url http://secunia.com/advisories/25660
9
reference_url http://secunia.com/advisories/25938
reference_id
reference_type
scores
url http://secunia.com/advisories/25938
10
reference_url http://secunia.com/advisories/25945
reference_id
reference_type
scores
url http://secunia.com/advisories/25945
11
reference_url http://secunia.com/advisories/26048
reference_id
reference_type
scores
url http://secunia.com/advisories/26048
12
reference_url http://secunia.com/advisories/26102
reference_id
reference_type
scores
url http://secunia.com/advisories/26102
13
reference_url http://secunia.com/advisories/27377
reference_id
reference_type
scores
url http://secunia.com/advisories/27377
14
reference_url http://security.gentoo.org/glsa/glsa-200705-19.xml
reference_id
reference_type
scores
url http://security.gentoo.org/glsa/glsa-200705-19.xml
15
reference_url https://issues.rpath.com/browse/RPL-1693
reference_id
reference_type
scores
url https://issues.rpath.com/browse/RPL-1693
16
reference_url https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11257
reference_id
reference_type
scores
url https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11257
17
reference_url https://rhn.redhat.com/errata/RHSA-2007-0348.html
reference_id
reference_type
scores
url https://rhn.redhat.com/errata/RHSA-2007-0348.html
18
reference_url http://support.avaya.com/elmodocs2/security/ASA-2007-231.htm
reference_id
reference_type
scores
url http://support.avaya.com/elmodocs2/security/ASA-2007-231.htm
19
reference_url http://us2.php.net/releases/4_4_7.php
reference_id
reference_type
scores
url http://us2.php.net/releases/4_4_7.php
20
reference_url http://us2.php.net/releases/5_2_2.php
reference_id
reference_type
scores
url http://us2.php.net/releases/5_2_2.php
21
reference_url http://www.debian.org/security/2007/dsa-1330
reference_id
reference_type
scores
url http://www.debian.org/security/2007/dsa-1330
22
reference_url http://www.debian.org/security/2007/dsa-1331
reference_id
reference_type
scores
url http://www.debian.org/security/2007/dsa-1331
23
reference_url http://www.mandriva.com/security/advisories?name=MDKSA-2007:102
reference_id
reference_type
scores
url http://www.mandriva.com/security/advisories?name=MDKSA-2007:102
24
reference_url http://www.mandriva.com/security/advisories?name=MDKSA-2007:103
reference_id
reference_type
scores
url http://www.mandriva.com/security/advisories?name=MDKSA-2007:103
25
reference_url http://www.redhat.com/support/errata/RHSA-2007-0349.html
reference_id
reference_type
scores
url http://www.redhat.com/support/errata/RHSA-2007-0349.html
26
reference_url http://www.redhat.com/support/errata/RHSA-2007-0355.html
reference_id
reference_type
scores
url http://www.redhat.com/support/errata/RHSA-2007-0355.html
27
reference_url http://www.securityfocus.com/bid/23813
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/23813
28
reference_url http://www.securitytracker.com/id?1018024
reference_id
reference_type
scores
url http://www.securitytracker.com/id?1018024
29
reference_url http://www.trustix.org/errata/2007/0017/
reference_id
reference_type
scores
url http://www.trustix.org/errata/2007/0017/
30
reference_url http://www.ubuntu.com/usn/usn-485-1
reference_id
reference_type
scores
url http://www.ubuntu.com/usn/usn-485-1
31
reference_url http://www.vupen.com/english/advisories/2007/2187
reference_id
reference_type
scores
url http://www.vupen.com/english/advisories/2007/2187
32
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=239009
reference_id 239009
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=239009
33
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:*:*:*:*:*:*:*:*
34
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*
reference_id cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*
35
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*
reference_id cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*
36
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*
reference_id cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*
37
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*
38
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*
39
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_server:5.0:*:*:*:*:*:*:*
40
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*
reference_id cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:o:redhat:enterprise_linux_workstation:5.0:*:*:*:*:*:*:*
41
reference_url https://nvd.nist.gov/vuln/detail/CVE-2007-1864
reference_id CVE-2007-1864
reference_type
scores
0
value 7.5
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:P/A:P
url https://nvd.nist.gov/vuln/detail/CVE-2007-1864
42
reference_url https://security.gentoo.org/glsa/200705-19
reference_id GLSA-200705-19
reference_type
scores
url https://security.gentoo.org/glsa/200705-19
43
reference_url https://access.redhat.com/errata/RHSA-2007:0348
reference_id RHSA-2007:0348
reference_type
scores
url https://access.redhat.com/errata/RHSA-2007:0348
44
reference_url https://access.redhat.com/errata/RHSA-2007:0349
reference_id RHSA-2007:0349
reference_type
scores
url https://access.redhat.com/errata/RHSA-2007:0349
45
reference_url https://access.redhat.com/errata/RHSA-2007:0355
reference_id RHSA-2007:0355
reference_type
scores
url https://access.redhat.com/errata/RHSA-2007:0355
46
reference_url https://usn.ubuntu.com/485-1/
reference_id USN-485-1
reference_type
scores
url https://usn.ubuntu.com/485-1/
Weaknesses
0
cwe_id 119
name Improper Restriction of Operations within the Bounds of a Memory Buffer
description The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.
Exploits
Severity_range_score7.5 - 7.5
Exploitability0.5
Weighted_severity6.8
Risk_score3.4
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-vtb3-na5h-cyd9