CVE-2007-1401: PHP

Medium severity, CVSS 6.9. EPSS: 0.8% chance of exploitation in the next 30 days.

Buffer overflow in the crack extension (CrackLib), as bundled with PHP 4.4.6 and other versions before 5.0.0, might allow local users to gain privileges via a long argument to the crack_opendict function.

Affected products

• PHP PHP: version 4.4.6 only

Published 2007-03-10. Last modified 2026-06-16.