PublicDate: 2007-03-16 21:19:00 UTC Candidate: CVE-2007-1484 References: https://ubuntu.com/security/notices/USN-455-1 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1484 Description: The array_user_key_compare function in PHP 4.4.6 and earlier, and 5.x up to 5.2.1, makes erroneous calls to zval_dtor, which triggers memory corruption and allows local users to bypass safe_mode and execute arbitrary code via a certain unset operation after array_user_key_compare has been called. Ubuntu-Description: Notes: Priority: untriaged Discovered-by: Assigned-to: CVSS: Bugs: upstream_php5: released (5.2.2) dapper_php5: released (5.1.2-1ubuntu3.9) edgy_php5: released (5.1.6-1ubuntu2.6) feisty_php5: released (5.2.1-0ubuntu1.4) devel_php5: not-affected