CVE-2007-1890: PHP

High severity, CVSS 7.5. EPSS: 7.8% chance of exploitation in the next 30 days.

Integer overflow in the msg_receive function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1, on FreeBSD and possibly other platforms, allows context-dependent attackers to execute arbitrary code via certain maxsize values, as demonstrated by 0xffffffff.

Affected products

• PHP PHP: version 4.0.0 only; version 4.0.1 only; version 4.0.2 only; version 4.0.3 only; version 4.0.4 only; version 4.0.5 only; …

Published 2007-04-06. Last modified 2026-06-16.