Vulnerability Report

CVE-2007-4033

Title: Php RCE

Memory Corruption

Proof Of Concept

PoC Available for CVE-2007-4033

CWE Category CWE-119

Published Date Jul 27, 2007

Modified Date Jun 16, 2026

Exploit Status Available

Score 7.5 CVSS v2.0

Exploit Probability (EPSS)

18.66%

Vulnerability Summary

CVE-2007-4033: Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter. NOTE: this issue was originally reported to be in the imagepsloadfont function in php_gd2.dll in the gd (PHP_GD2) extension in PHP 5.2.3.

Impacted Vendors

t1lib 1

php 1

php_group 1

Reference Links

http://bugs.gentoo.org/show_bug.cgi?id=193437 http://fedoranews.org/updates/FEDORA-2007-234.shtml http://secunia.com/advisories/26241 http://secunia.com/advisories/26901 http://secunia.com/advisories/26981 http://secunia.com/advisories/26992 http://secunia.com/advisories/27239 http://secunia.com/advisories/27297 http://secunia.com/advisories/27439 http://secunia.com/advisories/27599 http://secunia.com/advisories/27718 http://secunia.com/advisories/27743 http://secunia.com/advisories/28345 http://secunia.com/advisories/30168 http://security.gentoo.org/glsa/glsa-200710-12.xml http://security.gentoo.org/glsa/glsa-200711-34.xml http://security.gentoo.org/glsa/glsa-200805-13.xml http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0007 http://www.bugtraq.ir/adv/t1lib.txt http://www.debian.org/security/2007/dsa-1390 http://www.mandriva.com/security/advisories?name=MDKSA-2007:189 http://www.mandriva.com/security/advisories?name=MDKSA-2007:230 http://www.novell.com/linux/security/advisories/2007_23_sr.html http://www.redhat.com/support/errata/RHSA-2007-1027.html http://www.redhat.com/support/errata/RHSA-2007-1030.html http://www.redhat.com/support/errata/RHSA-2007-1031.html http://www.securityfocus.com/archive/1/480239/100/100/threaded http://www.securityfocus.com/archive/1/480244/100/100/threaded http://www.securityfocus.com/archive/1/485823/100/0/threaded http://www.securityfocus.com/archive/1/487984/100/0/threaded http://www.securityfocus.com/bid/25079 http://www.securitytracker.com/id?1018905 http://www.ubuntu.com/usn/usn-515-1 https://bugzilla.redhat.com/show_bug.cgi?id=303021 https://exchange.xforce.ibmcloud.com/vulnerabilities/35620 https://issues.rpath.com/browse/RPL-1972 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10557 https://www.exploit-db.com/exploits/4227 https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00724.html http://bugs.gentoo.org/show_bug.cgi?id=193437 http://fedoranews.org/updates/FEDORA-2007-234.shtml http://secunia.com/advisories/26241 http://secunia.com/advisories/26901 http://secunia.com/advisories/26981 http://secunia.com/advisories/26992 http://secunia.com/advisories/27239 http://secunia.com/advisories/27297 http://secunia.com/advisories/27439 http://secunia.com/advisories/27599 http://secunia.com/advisories/27718 http://secunia.com/advisories/27743 http://secunia.com/advisories/28345 http://secunia.com/advisories/30168 http://security.gentoo.org/glsa/glsa-200710-12.xml http://security.gentoo.org/glsa/glsa-200711-34.xml http://security.gentoo.org/glsa/glsa-200805-13.xml http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0007 http://www.bugtraq.ir/adv/t1lib.txt http://www.debian.org/security/2007/dsa-1390 http://www.mandriva.com/security/advisories?name=MDKSA-2007:189 http://www.mandriva.com/security/advisories?name=MDKSA-2007:230 http://www.novell.com/linux/security/advisories/2007_23_sr.html http://www.redhat.com/support/errata/RHSA-2007-1027.html http://www.redhat.com/support/errata/RHSA-2007-1030.html http://www.redhat.com/support/errata/RHSA-2007-1031.html http://www.securityfocus.com/archive/1/480239/100/100/threaded http://www.securityfocus.com/archive/1/480244/100/100/threaded http://www.securityfocus.com/archive/1/485823/100/0/threaded http://www.securityfocus.com/archive/1/487984/100/0/threaded http://www.securityfocus.com/bid/25079 http://www.securitytracker.com/id?1018905 http://www.ubuntu.com/usn/usn-515-1 https://bugzilla.redhat.com/show_bug.cgi?id=303021 https://exchange.xforce.ibmcloud.com/vulnerabilities/35620 https://issues.rpath.com/browse/RPL-1972 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10557 https://www.exploit-db.com/exploits/4227 https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00724.html

CVSS v2.0

Source Entity [email protected]

Severity HIGH

7.5

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:L/Au:N/C:P/I:P/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2007-4033 Exploits & PoCs (Proof Of Concept)

Exploit-DB https://www.exploit-db.com/exploits/30401

View Code

Exploit-DB https://www.exploit-db.com/exploits/4227

View Code

June 16, 2026 MODIFIED

Vulnerability data updated via NVD.

April 09, 2025 MODIFIED

Vulnerability data or affected products updated.

July 27, 2007 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected Stack

No specific products linked.