CVE-2007-1582
Status: ModifiedMedium (6.8)—Exploit
Severity6.8Medium · CVSS 2.0
Exploitation probability6.01 %higher than 93% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitAvailablePublished on Exploit-DB
The resource system in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent attackers to execute arbitrary code by interrupting certain functions in the GD (ext/gd) extension and unspecified other extensions via a userspace error handler, which can be used to destroy and modify internal resources.
CVSS
- Base score
- 6.8
- Version
- 2.0
- Vector
- AV:N/AC:M/Au:N/C:P/I:P/A:P
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days
- 6.01 %
- Percentile among all scored CVEs
- 93
- Score date
- 10/24/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Public exploits
Exploit code or detection templates are publicly available. This is not the same as confirmed active exploitation (KEV), but it raises the risk: patch with priority.
- Published on Exploit-DB · PHP 4.4.6/5.2.1 - ext/gd Already Freed Resources Usage (3/20/2007)
Affected technologies (1)
CWEs
- NVD-CWE-Other
References
Show 8 references
- http://secunia.com/advisories/24542
- http://www.php-security.org/MOPB/MOPB-27-2007.html
- http://www.securityfocus.com/bid/23046
- https://www.exploit-db.com/exploits/3525
- http://secunia.com/advisories/24542
- http://www.php-security.org/MOPB/MOPB-27-2007.html
- http://www.securityfocus.com/bid/23046
- https://www.exploit-db.com/exploits/3525
Raw JSON (NVD)
Show
{
"id": "CVE-2007-1582",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.8,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2007-03-21T23:19:00.000",
"references": [
{
"url": "http://secunia.com/advisories/24542",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.php-security.org/MOPB/MOPB-27-2007.html",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/23046",
"source": "cve@mitre.org"
},
{
"url": "https://www.exploit-db.com/exploits/3525",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/24542",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.php-security.org/MOPB/MOPB-27-2007.html",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/23046",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.exploit-db.com/exploits/3525",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The resource system in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent attackers to execute arbitrary code by interrupting certain functions in the GD (ext/gd) extension and unspecified other extensions via a userspace error handler, which can be used to destroy and modify internal resources."
},
{
"lang": "es",
"value": "El sistema de recursos en PHP 4.0.0 hasta 4.4.6 y 5.0.0 hasta 5.2.1 permite a atacante dependientes del contexto ejecutar código de su elección mediante interrupciones en ciertas funciones de la extensión GD (ext/gd) y otras extensiones no especificadas mediante un manejador de error userspace, el cual puede ser usado para destruir y modificar recursos internos."
}
],
"lastModified": "2026-06-16T22:37:52.547",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:php:php:4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EDBEC461-D553-41B7-8D85-20B6A933C21C"
},
{
"criteria": "cpe:2.3:a:php:php:4.0:beta_4_patch1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AEEF2298-98E8-409F-9205-84817CEF947B"
},
{
"criteria": "cpe:2.3:a:php:php:4.0:beta1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6AFC00BA-D64D-4407-AC69-FDD9FF013943"
},
{
"criteria": "cpe:2.3:a:php:php:4.0:beta2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D80F2A8B-B57F-4970-867A-55E8187C1502"
},
{
"criteria": "cpe:2.3:a:php:php:4.0:beta3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EF4E0EFE-4FF6-4E8F-8EC5-68B059FC0C42"
},
{
"criteria": "cpe:2.3:a:php:php:4.0:beta4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "49965B80-DC27-4864-BDF0-CBBFF16BFD80"
},
{
"criteria": "cpe:2.3:a:php:php:4.0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8212495A-0F2A-4787-93F2-F6618F9A777B"
},
{
"criteria": "cpe:2.3:a:php:php:4.0:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C6F0F8FC-C57A-4AEA-A59F-41140347318A"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7BF57C14-86B6-419A-BAFF-93D01CB1E081"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78BAA18C-E5A0-4210-B64B-709BBFF31EEC"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "419867C6-37BE-43B4-BFE0-6325FEE3807D"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "37896E87-95C2-4039-8362-BC03B1C56706"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "13A159B4-B847-47DE-B7F8-89384E6C551B"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57B59616-A309-40B4-94B1-50A7BC00E35C"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8667FBC6-04B6-40E5-93B3-6C22BEED4B26"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F39A1B1-416E-4436-8007-733B66904A14"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.4:patch1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B8B3138-3DCC-4682-B9A8-920E1110700D"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC2E5F96-66D2-4F99-A74D-6A2305EE218E"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D724D09-0D45-4701-93C9-348301217C8C"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E36203C-1392-49BB-AE7E-49626963D673"
},
{
"criteria": "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6713614A-B14E-4A85-BF89-ED780068FC68"
},
{
"criteria": "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FD95F8EB-B428-4B3C-9254-A5DECE03A989"
},
{
"criteria": "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
},
{
"criteria": "cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"
},
{
"criteria": "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "18BF5BE6-09EA-45AD-93BF-2BEF1742534E"
},
{
"criteria": "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC1460DF-1687-4314-BF1A-01290B20302D"
},
{
"criteria": "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "470380B0-3982-48FC-871B-C8B43C81900D"
},
{
"criteria": "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57B71BB7-5239-4860-9100-8CABC3992D8C"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11579E5C-D7CF-46EE-B015-5F4185C174E7"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "221B9AC4-C63C-4386-B3BD-E4BC102C6124"
},
{
"criteria": "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
},
{
"criteria": "cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"
},
{
"criteria": "cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB25CFBB-347C-479E-8853-F49DD6CBD7D4"
},
{
"criteria": "cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4D2937B3-D034-400E-84F5-33833CE3764D"
},
{
"criteria": "cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71AEE8B4-FCF8-483B-8D4C-2E80A02E925E"
},
{
"criteria": "cpe:2.3:a:php:php:4.4.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C2AF1D9-33B6-4B2C-9269-426B6B720164"
},
{
"criteria": "cpe:2.3:a:php:php:4.4.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "84B70263-37AA-4539-A286-12038A3792C6"
},
{
"criteria": "cpe:2.3:a:php:php:5.0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F9D7662-A5B6-41D0-B6A1-E5ABC5ABA47F"
},
{
"criteria": "cpe:2.3:a:php:php:5.0:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E3797AB5-9E49-4251-A212-B6E5D9996764"
},
{
"criteria": "cpe:2.3:a:php:php:5.0:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D61D9CE9-F7A3-4F52-9D4E-B2473804ECB7"
},
{
"criteria": "cpe:2.3:a:php:php:5.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7007E77F-60EF-44D8-9676-15B59DF1325F"
},
{
"criteria": "cpe:2.3:a:php:php:5.0.0:beta1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E727CECE-E452-489A-A42F-5A069D6AF80E"
},
{
"criteria": "cpe:2.3:a:php:php:5.0.0:beta2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "149A1FB8-593E-412B-8E1C-3E560301D500"
},
{
"criteria": "cpe:2.3:a:php:php:5.0.0:beta3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5D6E8982-D7AE-4A52-8F7C-A4D59D2A2CA4"
},
{
"criteria": "cpe:2.3:a:php:php:5.0.0:beta4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8FC144FA-8F84-44C0-B263-B639FEAD20FB"
},
{
"criteria": "cpe:2.3:a:php:php:5.0.0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "295907B4-C3DE-4021-BE3B-A8826D4379E6"
},
{
"criteria": "cpe:2.3:a:php:php:5.0.0:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DBC98F82-6E1D-4A89-8ED4-ECD9BD954EB4"
},
{
"criteria": "cpe:2.3:a:php:php:5.0.0:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B881352D-954E-4FC0-9E42-93D02A3F3089"
},
{
"criteria": "cpe:2.3:a:php:php:5.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "17437AED-816A-4CCF-96DE-8C3D0CC8DB2B"
},
{
"criteria": "cpe:2.3:a:php:php:5.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "74E7AE59-1CB0-4300-BBE0-109F909789EF"
},
{
"criteria": "cpe:2.3:a:php:php:5.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9222821E-370F-4616-B787-CC22C2F4E7CD"
},
{
"criteria": "cpe:2.3:a:php:php:5.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9809449F-9A76-4318-B233-B4C2950A6EA9"
},
{
"criteria": "cpe:2.3:a:php:php:5.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0AA962D4-A4EC-4DC3-B8A9-D10941B92781"
},
{
"criteria": "cpe:2.3:a:php:php:5.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F8CDFEF9-C367-4800-8A2F-375C261FAE55"
},
{
"criteria": "cpe:2.3:a:php:php:5.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "16E43B88-1563-4EFD-9267-AE3E8C35D67A"
},
{
"criteria": "cpe:2.3:a:php:php:5.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11E5715F-A8BC-49EF-836B-BB78E1BC0790"
},
{
"criteria": "cpe:2.3:a:php:php:5.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5FA68843-158E-463E-B68A-1ACF041C4E10"
},
{
"criteria": "cpe:2.3:a:php:php:5.1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1874F637-77E2-4C4A-BF92-AEE96A60BFB0"
},
{
"criteria": "cpe:2.3:a:php:php:5.1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9592B32E-55CD-42D0-901E-8319823BC820"
},
{
"criteria": "cpe:2.3:a:php:php:5.1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A9BF34B5-F74C-4D56-9841-42452D60CB87"
},
{
"criteria": "cpe:2.3:a:php:php:5.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CD02D837-FD28-4E0F-93F8-25E8D1C84A99"
},
{
"criteria": "cpe:2.3:a:php:php:5.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "88358D1E-BE6F-4CE3-A522-83D1FA4739E3"
}
],
"operator": "OR"
}
]
}
],
"vendorComments": [
{
"comment": "The PHP interpreter does not offer a reliable "sandboxed" security\nlayer (as found in, say, a JVM) in which untrusted scripts can be run;\nany script run by the PHP interpreter must be trusted with the\nprivileges of the interpreter itself. We therefore do not classify\nthis issue as security-sensitive since no trust boundary is crossed.\n",
"lastModified": "2007-04-16T00:00:00",
"organization": "Red Hat"
}
],
"sourceIdentifier": "cve@mitre.org"
}