CVE-2007-4659

Published: 4 September 2007

The zend_alter_ini_entry function in PHP before 5.2.4 does not properly handle an interruption to the flow of execution triggered by a memory_limit violation, which has unknown impact and attack vectors.

Notes

205-zend_alter_ini_entry-fix.patch seems to break commandline ini config

Status

References

• https://www.cve.org/CVERecord?id=CVE-2007-4659
• NVD
• Launchpad
• Debian