CVE-2007-3790: The com_print_typeinfo function in the bz2 extension in PHP 5.2.3 allows context-dependent attackers to cau...

Security readout for executives and security teams

This is an old PHP 5.2.3 denial-of-service issue. The source bundle says a long argument to com_print_typeinfo can crash or disrupt service in a context-dependent way. It is not listed in CISA KEV, and no active exploitation is evidenced here. Likely limited to legacy PHP 5.2.3 environments where attacker-controlled input can reach the vulnerable function path. Exposure is uncertain because the bundle lists affected vendor/product as n/a and provides no CPEs. Treat as a legacy-risk cleanup item unless PHP 5.2.3 is still business-critical or internet-facing. If present in production, prioritize migration because the platform is obsolete and the bundle provides no safe vendor-supported mitigation. Mitigation focus: Identify and retire any remaining PHP 5.2.3 runtimes.; Check PHP vendor or distribution guidance for fixed historical versions.; Reduce exposure of legacy PHP applications to untrusted traffic..

Prepared

Jun 29, 2026, 04:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.