CVE:CVE-2007-4657
CNNVD:CNNVD-200709-004
PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。
PHP存在整数溢出漏洞，允许远程攻击者通过向strspn或strcspn函数传送很大的长度值触发越界读取，导致泄露敏感信息或拒绝服务。
solution:Upgrade php php to a higher version than 4.4.8,5.2.4,and avoid the version [4.0.0,4.4.8),[5.0.0,5.2.4); Upgrade debian debian_linux to a higher version than 3.1,4.0,and avoid the version 3.1,4.0; Upgrade canonical ubuntu_linux to a higher version than 6.06,6.10,7.04,7.10,and avoid the version 6.06,6.10,7.04,7.10