CVE-2007-1412

HIGH 7.8CVE-2007-1412 · Published 12/03/2007 · updated 16/06/2026

In short

CVE-2007-1412 is a HIGH (CVSS 7.8) vulnerability affecting php (php).
Chance of exploitation in the next 30 days (EPSS): 6.2%, higher than 93.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
php php	`= 4.4.6`	No fix yet

Description

The cpdf_open function in the ClibPDF (cpdf) extension in PHP 4.4.6 allows context-dependent attackers to obtain sensitive information (script source code) via a long string in the second argument.

References

securityfocus.com/bid/22897 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/32986
exploit-db.com/exploits/3442

More vulnerabilities in php

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free