Mission and Overview Resource Status NVD contains: CVE
Vulnerabilities US-CERT Alerts US-CERT Vuln Notes OVAL Queries
CPE Names  Last updated: Wed Dec 11 09:29:07 EST 2013  CVE
Publication rate: 16.33  Email List   Workload Index
Vulnerability Workload Index: 6.55  About Us  National Cyber
Awareness System  Vulnerability Summary for CVE-2007-1711
Original release date:03/27/2007 Last revised:11/06/2012
Double free vulnerability in the unserializer in PHP 4.4.5 and
4.4.6 allows context-dependent attackers to execute arbitrary
code by overwriting variables pointing to (1) the GLOBALS array
or (2) the session data in _SESSION. NOTE: this issue was
introduced when attempting to patch CVE-2007-1701
(MOPB-31-2007).   CVSS Severity (version 2.0): Impact Subscore:
6.4 Exploitability Subscore: 8.6 CVSS Version 2 Metrics: Access
Vector: Network exploitable Access Complexity: Medium
Authentication: Not required to exploit  References to
Advisories, Solutions, and Tools   External Source: CONFIRM
Name: https://issues