• info
• discussion
• exploit
• solution
• references

PHP CVE-2007-1584 Remote Security Vulnerability

PHP is prone to a remote security vulnerability. Buffer underflow in the header function in PHP 5.2.0 allows context-dependent attackers to execute arbitrary code by passing an all-whitespace string to this function, which causes it to write \0 characters in whitespace that precedes the string.