CVE-2007-3294

CVE-2007-3294 describes multiple buffer overflow vulnerabilities within the libtidy library, specifically impacting the Tidy extension for PHP 5.2.3 and potentially other products. Attackers could exploit these flaws by providing a long argument to tidy_parse_string or via an unspecified vector in tidy_repair_string, leading to arbitrary code execution. With a CVSS score of 7.5, this vulnerability is considered highly severe, allowing network-based attacks with low complexity and resulting in partial confidentiality, integrity, and availability impacts. While not listed in CISA's KEV catalog, an ExploitDB entry (EDB-4080) confirms the existence of a local buffer overflow exploit, though there is no evidence of active exploitation or significant community discussion.