CVE-2007-4887: The dl function in PHP 5.2.4 and earlier allows context-dependent attackers to cause a denial of service (a...

Security readout for executives and security teams

CVE-2007-4887 is an old PHP flaw where a specially long library name passed to PHP's dl function can crash the application. The CVE notes limited situations where this is exploitable, so urgency depends on whether legacy PHP 5.2.4 or earlier still exists and whether attackers can influence dl usage. Exposure is most likely in legacy applications still running PHP 5.2.4 or earlier and using dl in a path influenced by external input. Modern supported PHP deployments are unlikely to be exposed based on the provided sources. Prioritize remediation where old PHP is still running business-critical or internet-facing applications. If no PHP 5.2.4 or earlier remains, this CVE is mainly an archival tracking item. If exposed, the business impact is service interruption rather than confirmed data theft. Mitigation focus: Inventory systems for PHP 5.2.4 or earlier.; Upgrade affected runtimes using PHP or OS vendor guidance.; Remove unnecessary dl usage from application code..

Prepared

Jun 29, 2026, 03:38 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.