Login Request a demo
Unscored severity · published Jul 27, 2007
CVE-2007-4033
Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName…
–
CVSS
18.7%
EPSS
No
On KEV
Description
Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter. NOTE: this issue was originally reported to be in the imagepsloadfont function in php_gd2.dll in the gd (PHP_GD2) extension in PHP 5.2.3.
Exploitation
Is it being used?
Exploit prediction (EPSS)18.7% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PH
PHP · PHP
5.2.3 · source: NVD
T1
T1lib · T1lib
5.1.1 · source: NVD
Affected product
PH
PHP
PHP
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4033
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4033
bugs.gentoo.org
http://bugs.gentoo.org/show_bug.cgi?id=193437
fedoranews.org
http://fedoranews.org/updates/FEDORA-2007-234.shtml
Vendor Advisory
http://secunia.com/advisories/26241
Vendor Advisory
http://secunia.com/advisories/26901
Vendor Advisory
http://secunia.com/advisories/26981
Vendor Advisory
http://secunia.com/advisories/26992
More from PHP
9.8
CVE-2026-109618
RCE via OOM corruption
9.8
CVE-2024-4577
Argument Injection in PHP-CGI
9.8
CVE-2019-11043
Underflow in PHP-FPM can lead to RCE
9.8
CVE-2016-10033
The mailSend function in the isMail transport in PHPMailer before 5.2.18 might allow remote attackers to pass extra parameters to the mail command and consequently execute…
9.8
CVE-2012-1823
PHP-CGI Query String Parameter Vulnerability