CVE-2007-2872: Multiple integer overflows in the chunk_split function in PHP 5 before 5.2.3 and PHP 4 before 4.4.8 allow r...

Security readout for executives and security teams

CVE-2007-2872 affects very old PHP versions. A flaw in PHP's chunk_split function can let a remote attacker crash the process and may allow arbitrary code execution. The main business concern is legacy internet-facing PHP still running PHP 5 before 5.2.3 or PHP 4 before 4.4.8. Exposure is most likely in legacy PHP 4 or early PHP 5 environments, especially applications where remote input can reach chunk_split parameters. Modern supported PHP deployments should not be affected by the versions named in the CVE bundle. Treat this as a legacy-risk cleanup item with high urgency if old PHP is internet-facing. The vulnerability is old, but the stated impact includes possible code execution, and unsupported PHP runtimes increase operational risk. Mitigation focus: Upgrade PHP to 5.2.3, 4.4.8, or a vendor-supported fixed package.; Prioritize removing unsupported PHP 4 and early PHP 5 runtimes.; Review Red Hat, SUSE, OpenPKG, or distribution advisories for package-specific fixes..

Prepared

Jun 29, 2026, 05:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.