CVE-2007-1777
Status: ModifiedHigh (7.5)—Exploit
Severity7.5High · CVSS 2.0
Exploitation probability15 %higher than 97% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitAvailablePublished on Exploit-DB
Integer overflow in the zip_read_entry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code via a ZIP archive that contains an entry with a length value of 0xffffffff, which is incremented before use in an emalloc call, triggering a heap overflow.
CVSS
- Base score
- 7.5
- Version
- 2.0
- Vector
- AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days
- 15 %
- Percentile among all scored CVEs
- 97
- Score date
- 10/22/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Public exploits
Exploit code or detection templates are publicly available. This is not the same as confirmed active exploitation (KEV), but it raises the risk: patch with priority.
- Published on Exploit-DB · PHP 4.4.4 - 'Zip_Entry_Read()' Integer Overflow (3/27/2007)
Affected technologies (1)
CWEs
- NVD-CWE-Other
References
Show 16 references
- http://secunia.com/advisories/25025
- http://secunia.com/advisories/25062
- http://www.debian.org/security/2007/dsa-1282
- http://www.debian.org/security/2007/dsa-1283
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:130
- http://www.php-security.org/MOPB/MOPB-35-2007.html
- http://www.securityfocus.com/bid/23169
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33652
- http://secunia.com/advisories/25025
- http://secunia.com/advisories/25062
- http://www.debian.org/security/2007/dsa-1282
- http://www.debian.org/security/2007/dsa-1283
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:130
- http://www.php-security.org/MOPB/MOPB-35-2007.html
- http://www.securityfocus.com/bid/23169
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33652
Raw JSON (NVD)
Show
{
"id": "CVE-2007-1777",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": true,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2007-03-30T01:19:00.000",
"references": [
{
"url": "http://secunia.com/advisories/25025",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/25062",
"source": "cve@mitre.org"
},
{
"url": "http://www.debian.org/security/2007/dsa-1282",
"source": "cve@mitre.org"
},
{
"url": "http://www.debian.org/security/2007/dsa-1283",
"source": "cve@mitre.org"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:130",
"source": "cve@mitre.org"
},
{
"url": "http://www.php-security.org/MOPB/MOPB-35-2007.html",
"tags": [
"Exploit",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/23169",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33652",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/25025",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/25062",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.debian.org/security/2007/dsa-1282",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.debian.org/security/2007/dsa-1283",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:130",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.php-security.org/MOPB/MOPB-35-2007.html",
"tags": [
"Exploit",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/23169",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/33652",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Integer overflow in the zip_read_entry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code via a ZIP archive that contains an entry with a length value of 0xffffffff, which is incremented before use in an emalloc call, triggering a heap overflow."
},
{
"lang": "es",
"value": "Desbordamiento de entero en la función zip_read_entry en PHP 4 versiones anteriores a 4.4.5 permite a atacantes remotos ejecutar código de su elección mediante un fichero ZIP que contiene una entrada con un valor de longitud 0xffffffff, que se incrementa antes de ser usado en la llamada a emalloc, disparando un desbordamiento de montón."
}
],
"lastModified": "2026-06-16T22:38:16.360",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:php:php:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "245C601D-0FE7-47E3-8304-6FF45E9567D6"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "691BB8BB-329A-4640-B758-7590C99B5E42"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2BC4CCE-2774-463E-82EA-36CD442D3A7B"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C478024C-2FCD-463F-A75E-E04660AA9DF1"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AC9C32F4-5102-4E9B-9F32-B24B65A5ED2F"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A5BD99C0-E875-496E-BE5E-A8DCBD414B5C"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1851ADE5-C70C-46E0-941A-6ADF7DB5C126"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "69DA3BA2-AF53-4C9D-93FA-0317841595B1"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB0CFEE5-2274-4BBC-A24A-3A0D13F607FA"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "67B59D6A-7EDA-4C34-81D6-C2557C85D164"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AEBA40B6-8FDF-41AA-8166-F491FF7F3118"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E74E2B72-A428-4BB3-B6F8-0AF5E487A807"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.12:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1E2F1D82-8E6A-4FBF-9055-A0F395DC17FA"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.13:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "945FF149-3446-4905-BCA1-C397E3497B58"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E446DBD-FEFA-4D22-9C9D-51F61C01E414"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3C8DE728-78E1-4F9F-BC56-CD9B10E61287"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "80E31CC6-9356-4BB7-9F49-320AAF341E1E"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1BB8AD3A-9181-459A-9AF2-B3FC6BAF6FEC"
},
{
"criteria": "cpe:2.3:a:php:php:3.0.18:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4B3E7199-8FB7-4930-9C0A-A36A698940B3"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7BF57C14-86B6-419A-BAFF-93D01CB1E081"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78BAA18C-E5A0-4210-B64B-709BBFF31EEC"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.1:patch1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "419867C6-37BE-43B4-BFE0-6325FEE3807D"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.1:patch2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "37896E87-95C2-4039-8362-BC03B1C56706"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "13A159B4-B847-47DE-B7F8-89384E6C551B"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57B59616-A309-40B4-94B1-50A7BC00E35C"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.3:patch1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8667FBC6-04B6-40E5-93B3-6C22BEED4B26"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F39A1B1-416E-4436-8007-733B66904A14"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.4:patch1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B8B3138-3DCC-4682-B9A8-920E1110700D"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DD5FC218-3DDB-4981-81C9-6C69F8DA6F4D"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC2E5F96-66D2-4F99-A74D-6A2305EE218E"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D724D09-0D45-4701-93C9-348301217C8C"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.7:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC6A6F47-5C7C-4F82-B23B-9C959C69B27F"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.7:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AE1A4DA6-6181-43A8-B0D8-5A016C3E75FF"
},
{
"criteria": "cpe:2.3:a:php:php:4.0.7:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6E36203C-1392-49BB-AE7E-49626963D673"
},
{
"criteria": "cpe:2.3:a:php:php:4.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6713614A-B14E-4A85-BF89-ED780068FC68"
},
{
"criteria": "cpe:2.3:a:php:php:4.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FD95F8EB-B428-4B3C-9254-A5DECE03A989"
},
{
"criteria": "cpe:2.3:a:php:php:4.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "069EB7EE-06B9-454F-9007-8DE5DCA33C53"
},
{
"criteria": "cpe:2.3:a:php:php:4.2:*:dev:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BBA861A2-F0CD-4DBB-B43A-4970EB114DA5"
},
{
"criteria": "cpe:2.3:a:php:php:4.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "18BF5BE6-09EA-45AD-93BF-2BEF1742534E"
},
{
"criteria": "cpe:2.3:a:php:php:4.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EC1460DF-1687-4314-BF1A-01290B20302D"
},
{
"criteria": "cpe:2.3:a:php:php:4.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "470380B0-3982-48FC-871B-C8B43C81900D"
},
{
"criteria": "cpe:2.3:a:php:php:4.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9FAA7712-10F0-4BB6-BAFB-D0806AFD9DE2"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63190D9B-7958-4B93-87C6-E7D5A572F6DC"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7AB2E2E8-81D6-4973-AC0F-AA644EE99DD3"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4AAF4586-74FF-47C6-864B-656FDF3F33D0"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B14EF0C7-61F2-47A4-B7F8-43FF03C62DCA"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5245F990-B4A7-4ED8-909D-B8137CE79FAA"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5652D5B0-68E4-4239-B9B7-599AFCF4C53E"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "57B71BB7-5239-4860-9100-8CABC3992D8C"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "72BD447A-4EED-482C-8F61-48FAD4FCF8BA"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3F9DF9D-15E5-4387-ABE3-A7583331A928"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.9:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11579E5C-D7CF-46EE-B015-5F4185C174E7"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C69CDE21-2FD4-4529-8F02-8709CF5E3D7E"
},
{
"criteria": "cpe:2.3:a:php:php:4.3.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "221B9AC4-C63C-4386-B3BD-E4BC102C6124"
},
{
"criteria": "cpe:2.3:a:php:php:4.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "78B7BA75-2A32-4A8E-ADF8-BCB4FC48CB5C"
},
{
"criteria": "cpe:2.3:a:php:php:4.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2BEA491B-77FD-4760-8F6F-3EBC6BD810D9"
},
{
"criteria": "cpe:2.3:a:php:php:4.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB25CFBB-347C-479E-8853-F49DD6CBD7D4"
},
{
"criteria": "cpe:2.3:a:php:php:4.4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4D2937B3-D034-400E-84F5-33833CE3764D"
},
{
"criteria": "cpe:2.3:a:php:php:4.4.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71AEE8B4-FCF8-483B-8D4C-2E80A02E925E"
}
],
"operator": "OR"
}
]
}
],
"vendorComments": [
{
"comment": "Not vulnerable. The zip extension was not distributed with PHP as\nshipped with Red Hat Enterprise Linux 2.1, 3, 4, 5, Stronghold 4.0, or\nRed Hat Application Stack 1.\n",
"lastModified": "2007-04-16T00:00:00",
"organization": "Red Hat"
}
],
"sourceIdentifier": "cve@mitre.org"
}