Description
The substr_count function in PHP 5.2.1 and earlier allows context-dependent attackers to obtain sensitive information via unspecified vectors, a different affected function than CVE-2007-1375.
References
- 34730 vdb-entry
- 20070516 CVE-2007-1375 additional vector? mailing-list
- http://us2.php.net/releases/5_2_2.php
- MDKSA-2007:187 vendor-advisory
- 24012 vdb-entry
- 26895 third-party-advisory
- SUSE-SR:2007:015 vendor-advisory