CVE-2007-1484

The array_user_key_compare function in PHP 4.4.6 and earlier, and 5.x up to 5.2.1, makes erroneous calls to zval_dtor, which triggers memory corruption and allows local users to bypass safe_mode and execute arbitrary code via a certain unset operation after array_user_key_compare has been called.

We have discovered 112,552 live websites that are affected by CVE-2007-1484.

Run a Free Instant Scan



Affected Software

Product  PHP
Category Programming Languages
Vulnerable Domains112,552 live websites (1.63% of PHP install base)
Vulnerable Versions
  • from 0 through 5.2.1
Vulnerable Versions Count14 versions ( 2.65% of all versions)



Details

  • Published - Mar 16, 2007
  • Updated - Aug 7, 2024

Website Distribution by Country

Number of websites using CVE-2007-1484
United States5,483 websites


Taiwan79,612 websites
Korea, South4,672 websites
Germany3,903 websites
Japan3,099 websites
France2,529 websites
Russia1,853 websites
Czech Republic838 websites
Canada837 websites

Website Distribution by TLD

Number of websites using CVE-2007-1484
.com76,770 websites
.info4,441 websites
.de3,182 websites
.net2,950 websites
.ru1,655 websites
.org1,477 websites
.jp980 websites
.cz739 websites
.fr661 websites
.ch635 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2007-1484

Top websites that are affected by CVE-2007-1484. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*****.***.tw Taiwan*,***
**********.*****.de Germany*,***
****.info France**,***
******.com Taiwan**,***
******.com Taiwan**,***
****.com Taiwan**,***
*****.com Taiwan**,***
******.com Taiwan**,***
*****.com Taiwan**,***
*****.com Taiwan**,***
See full domain list

FAQ

A total of 112,552 websites have been identified as vulnerable to CVE-2007-1484, based on global website indexing conducted by WebTechSurvey.
The PHP is affected by the CVE-2007-1484 vulnerability.
PHP versions up to and including 5.2.1 are vulnerable to CVE-2007-1484.

References