CVE-2007-4507: PHP

Medium severity, CVSS 6.8. EPSS: 5.8% chance of exploitation in the next 30 days.

Multiple buffer overflows in the php_ntuser component for PHP 5.2.3 allow context-dependent attackers to cause a denial of service or execute arbitrary code via long arguments to the (1) ntuser_getuserlist, (2) ntuser_getuserinfo, (3) ntuser_getusergroups, or (4) ntuser_getdomaincontroller functions.

Affected products

• PHP PHP: version 5.2.3 only

Published 2007-08-23. Last modified 2026-06-16.