漏洞描述
Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unserialize function, which triggers the overflow in the ZVAL reference counter.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
secunia.comhttp://secunia.com/advisories/24945↗secunia.comhttp://secunia.com/advisories/24924↗secunia.comhttp://secunia.com/advisories/25423↗security.gentoo.orghttp://security.gentoo.org/glsa/glsa-200705-19.xml↗secunia.comhttp://secunia.com/advisories/24419↗secunia.comhttp://secunia.com/advisories/25850↗www.debian.orghttp://www.debian.org/security/2007/dsa-1282↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2007-0154.html↗secunia.comhttp://secunia.com/advisories/25025↗www.mandriva.comhttp://www.mandriva.com/security/advisories?name=MDKSA-2007:088↗www.trustix.orghttp://www.trustix.org/errata/2007/0009/↗h20000.www2.hp.comhttp://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01056506↗www.debian.orghttp://www.debian.org/security/2007/dsa-1283↗security.gentoo.orghttp://security.gentoo.org/glsa/glsa-200703-21.xml↗h20000.www2.hp.comhttp://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?lang=en&cc=us&objectID=c01086137↗www.vupen.comhttp://www.vupen.com/english/advisories/2007/2374↗secunia.comhttp://secunia.com/advisories/24941↗exchange.xforce.ibmcloud.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/32796↗www.php-security.orghttp://www.php-security.org/MOPB/MOPB-04-2007.html↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2007-0155.html↗www.securityfocus.comhttp://www.securityfocus.com/bid/22765↗secunia.comhttp://secunia.com/advisories/24910↗secunia.comhttp://secunia.com/advisories/25445↗www.osvdb.orghttp://www.osvdb.org/32771↗rhn.redhat.comhttp://rhn.redhat.com/errata/RHSA-2007-0163.html↗secunia.comhttp://secunia.com/advisories/24606↗www.mandriva.comhttp://www.mandriva.com/security/advisories?name=MDKSA-2007:087↗www.securityfocus.comhttp://www.securityfocus.com/archive/1/466166/100/0/threaded↗www.vupen.comhttp://www.vupen.com/english/advisories/2007/1991↗issues.rpath.comhttps://issues.rpath.com/browse/RPL-1268↗oval.cisecurity.orghttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11575↗secunia.comhttp://secunia.com/advisories/25062↗