CVE-2007-1285

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

18.83% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 97.2% of scored records. A rank, not a probability.

NVD base score

7.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-16.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2007-03-06 20:00Z19 YR AGO

Last updated

2024-08-07 12:50Z2 YR AGO

Reserved

2007-03-06

Assigning CNA

mitre

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

• CWE-674Uncontrolled RecursionClass

Data version

5.1

Document digest

9b8ba05df1b58697a36d5ae35ca09b5834818d9dbda105f81035dbd8a9be800f

• launchpad.nethttps://launchpad.net/bugs/173043x_refsource_CONFIRM
• www.securityfocus.com22764http://www.securityfocus.com/bid/22764vdb-entryx_refsource_BID
• rhn.redhat.comRHSA-2007:0154http://rhn.redhat.com/errata/RHSA-2007-0154.htmlvendor-advisoryx_refsource_REDHAT
• secunia.com26048http://secunia.com/advisories/26048third-party-advisoryx_refsource_SECUNIA
• www.securityfocus.com20070418 rPSA-2007-0073-1 php php-mysql php-pgsqlhttp://www.securityfocus.com/archive/1/466166/100/0/threadedmailing-listx_refsource_BUGTRAQ
• security.gentoo.orgGLSA-200705-19http://security.gentoo.org/glsa/glsa-200705-19.xmlvendor-advisoryx_refsource_GENTOO
• secunia.com24941http://secunia.com/advisories/24941third-party-advisoryx_refsource_SECUNIA
• secunia.com27864http://secunia.com/advisories/27864third-party-advisoryx_refsource_SECUNIA
• www.redhat.comRHSA-2007:0162http://www.redhat.com/support/errata/RHSA-2007-0162.htmlvendor-advisoryx_refsource_REDHAT
• us2.php.nethttp://us2.php.net/releases/4_4_7.phpx_refsource_CONFIRM
• www.php.nethttp://www.php.net/releases/4_4_8.phpx_refsource_CONFIRM
• slackware.comSSA:2008-045-03http://slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.335136vendor-advisoryx_refsource_SLACKWARE
• www.php.nethttp://www.php.net/ChangeLog-5.php#5.2.4x_refsource_CONFIRM
• secunia.com28936http://secunia.com/advisories/28936third-party-advisoryx_refsource_SECUNIA
• www.mandriva.comMDKSA-2007:090http://www.mandriva.com/security/advisories?name=MDKSA-2007:090vendor-advisoryx_refsource_MANDRIVA
• www.php-security.orghttp://www.php-security.org/MOPB/MOPB-03-2007.htmlx_refsource_MISC
• usn.ubuntu.comUSN-549-1https://usn.ubuntu.com/549-1/vendor-advisoryx_refsource_UBUNTU
• secunia.com24909http://secunia.com/advisories/24909third-party-advisoryx_refsource_SECUNIA
• www.mandriva.comMDKSA-2007:087http://www.mandriva.com/security/advisories?name=MDKSA-2007:087vendor-advisoryx_refsource_MANDRIVA
• secunia.com24945http://secunia.com/advisories/24945third-party-advisoryx_refsource_SECUNIA
• oval.cisecurity.orgoval:org.mitre.oval:def:11017https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11017vdb-entrysignaturex_refsource_OVAL
• issues.rpath.comhttps://issues.rpath.com/browse/RPL-1268x_refsource_CONFIRM
• www.osvdb.org32769http://www.osvdb.org/32769vdb-entryx_refsource_OSVDB
• us2.php.nethttp://us2.php.net/releases/5_2_2.phpx_refsource_CONFIRM
• www.securitytracker.com1017771http://www.securitytracker.com/id?1017771vdb-entryx_refsource_SECTRACK
• www.redhat.comRHSA-2007:0082http://www.redhat.com/support/errata/RHSA-2007-0082.htmlvendor-advisoryx_refsource_REDHAT
• secunia.com24924http://secunia.com/advisories/24924third-party-advisoryx_refsource_SECUNIA
• rhn.redhat.comRHSA-2007:0155http://rhn.redhat.com/errata/RHSA-2007-0155.htmlvendor-advisoryx_refsource_REDHAT
• secunia.com24910http://secunia.com/advisories/24910third-party-advisoryx_refsource_SECUNIA
• www.php.nethttp://www.php.net/ChangeLog-4.phpx_refsource_CONFIRM
• www.php.nethttp://www.php.net/releases/5_2_4.phpx_refsource_CONFIRM
• www.mandriva.comMDKSA-2007:089http://www.mandriva.com/security/advisories?name=MDKSA-2007:089vendor-advisoryx_refsource_MANDRIVA
• secunia.com25445http://secunia.com/advisories/25445third-party-advisoryx_refsource_SECUNIA
• rhn.redhat.comRHSA-2007:0163http://rhn.redhat.com/errata/RHSA-2007-0163.htmlvendor-advisoryx_refsource_REDHAT
• www.ubuntu.comUSN-549-2http://www.ubuntu.com/usn/usn-549-2vendor-advisoryx_refsource_UBUNTU
• secunia.com26642http://secunia.com/advisories/26642third-party-advisoryx_refsource_SECUNIA
• www.mandriva.comMDKSA-2007:088http://www.mandriva.com/security/advisories?name=MDKSA-2007:088vendor-advisoryx_refsource_MANDRIVA
• lists.opensuse.orgSUSE-SA:2007:044http://lists.opensuse.org/opensuse-security-announce/2007-07/msg00006.htmlvendor-advisoryx_refsource_SUSE