CVE-2007-1453

CVE-2007-1453 describes a buffer underflow vulnerability in the PHP_FILTER_TRIM_DEFAULT macro within PHP's filtering extension (ext/filter) in version 5.2.0. This flaw allows attackers to execute arbitrary code by manipulating the filter_var function, specifically with modes like FILTER_VALIDATE_INT, which leads to a null byte being written before the buffer. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low access complexity, and potential for partial compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation in the wild or Metasploit/Nuclei modules, an exploit for a remote buffer overflow related to this vulnerability is available on ExploitDB, though community discussion and media coverage are minimal.