Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Improper Input Validation Vulnerability - CVE-2007-4840 - Vulnerability Database
PHP

PHP Improper Input Validation Vulnerability - CVE-2007-4840

Medium
Reference: CVE-2007-4840
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2007-4840
Title: PHP Improper Input Validation Vulnerability
Overview:

PHP 5.2.4 and earlier allows context-dependent attackers to cause a denial of service (application crash) via (1) a long string in the out_charset parameter to the iconv function or a long string in the charset parameter to the (2) iconv_mime_decode_headers (3) iconv_mime_decode or (4) iconv_strlen function. NOTE: this might not be a vulnerability in most web server environments that support multiple threads unless these issues can be demonstrated for code execution.