CVE-2007-1581

CVE-2007-1581 describes a critical arbitrary code execution vulnerability in PHP versions 5.0.0 through 5.2.1, and later confirmed in 5.2 through 5.2.13 and 5.3 through 5.3.2. Attackers can exploit this by interrupting the hash_update_file function using a userspace error or stream handler, allowing them to destroy and modify internal resources. With a CVSS score of 9.3, this vulnerability is highly severe, requiring no authentication and having high impact on confidentiality, integrity, and availability, though it does have a medium attack complexity. While there is an ExploitDB entry for PHP 5.2.1, there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.