CVE-2007-1825: Buffer overflow in the imap_mail_compose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5, allows rem...

Security readout for executives and security teams

This is an old PHP buffer overflow affecting imap_mail_compose in PHP 5 before 5.2.1 and PHP 4 before 4.4.5. A remote attacker could potentially execute arbitrary code by supplying an overly long MIME boundary value. Exposure is mainly legacy PHP systems using this IMAP-related function. Likely exposure is limited to obsolete PHP 4 or early PHP 5 deployments where applications call imap_mail_compose with attacker-influenced MIME structure data. Modern supported PHP branches should not be assumed affected from these sources. Prioritize this when legacy PHP exists in production, especially on exposed systems. The vulnerability is old but potentially severe because the stated impact is arbitrary code execution. If no affected PHP remains, urgency is low after verification. Mitigation focus: Upgrade affected PHP 5 systems to 5.2.1 or later, preferably a supported PHP release.; Upgrade affected PHP 4 systems to 4.4.5 or later, or retire them.; Remove or disable unused IMAP functionality where operationally feasible..

Prepared

Jun 29, 2026, 06:24 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.