Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-2n3q-pxj8-dbhq
Vulnerability ID VCID-2n3q-pxj8-dbhq
Aliases CVE-2007-0911
Summary PHP contains several vulnerabilities including a heap buffer overflow, potentially leading to the remote execution of arbitrary code under certain conditions.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.09711 https://api.first.org/data/v1/epss?cve=CVE-2007-0911
epss 0.09711 https://api.first.org/data/v1/epss?cve=CVE-2007-0911
epss 0.09711 https://api.first.org/data/v1/epss?cve=CVE-2007-0911
epss 0.09711 https://api.first.org/data/v1/epss?cve=CVE-2007-0911
epss 0.09711 https://api.first.org/data/v1/epss?cve=CVE-2007-0911
epss 0.09711 https://api.first.org/data/v1/epss?cve=CVE-2007-0911
epss 0.09711 https://api.first.org/data/v1/epss?cve=CVE-2007-0911
epss 0.09711 https://api.first.org/data/v1/epss?cve=CVE-2007-0911
epss 0.09711 https://api.first.org/data/v1/epss?cve=CVE-2007-0911
epss 0.09711 https://api.first.org/data/v1/epss?cve=CVE-2007-0911
epss 0.09711 https://api.first.org/data/v1/epss?cve=CVE-2007-0911
epss 0.09711 https://api.first.org/data/v1/epss?cve=CVE-2007-0911
cvssv2 7.8 https://nvd.nist.gov/vuln/detail/CVE-2007-0911
Reference id Reference type URL
http://cvs.php.net/viewvc.cgi/php-src/ext/standard/string.c?r1=1.445.2.14.2.36&r2=1.445.2.14.2.37
http://lists.suse.com/archive/suse-security-announce/2007-Mar/0003.html
http://marc.info/?l=php-dev&m=117104930526516&w=2
http://marc.info/?l=php-dev&m=117106751715609&w=2
http://osvdb.org/33952
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-0911.json
https://api.first.org/data/v1/epss?cve=CVE-2007-0911
http://secunia.com/advisories/24514
http://secunia.com/advisories/24606
http://security.gentoo.org/glsa/glsa-200703-21.xml
http://www.securityfocus.com/archive/1/459856/100/0/threaded
http://www.securityfocus.com/bid/22505
cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*
CVE-2007-0911 https://nvd.nist.gov/vuln/detail/CVE-2007-0911
CVE-2007-0911;OSVDB-33952 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/dos/29577.php
CVE-2007-0911;OSVDB-33952 Exploit https://www.securityfocus.com/bid/22505/info
GLSA-200703-21 https://security.gentoo.org/glsa/200703-21
Data source Exploit-DB
Date added Feb. 9, 2007
Description PHP 5.2.1 - STR_IReplace Remote Denial of Service
Ransomware campaign use Known
Source publication date Feb. 9, 2007
Exploit type dos
Platform php
Source update date Nov. 14, 2013
Source URL https://www.securityfocus.com/bid/22505/info
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C Found at https://nvd.nist.gov/vuln/detail/CVE-2007-0911
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.92906
EPSS Score 0.09711
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T13:01:36.775624+00:00 Gentoo Importer Import https://security.gentoo.org/glsa/200703-21 38.0.0