CVE-2007-1521

Published: 20 March 2007

Double free vulnerability in PHP before 4.4.7, and 5.x before 5.2.2, allows context-dependent attackers to execute arbitrary code by interrupting the session_regenerate_id function, as demonstrated by calling a userspace error handler or triggering a memory limit violation.

Status

References

• https://ubuntu.com/security/notices/USN-455-1
• https://www.cve.org/CVERecord?id=CVE-2007-1521
• NVD
• Launchpad
• Debian