CVE-2007-4507

CVE-2007-4507 describes multiple buffer overflow vulnerabilities in the php_ntuser component of PHP 5.2.3. Specifically, long arguments supplied to the ntuser_getuserlist, ntuser_getuserinfo, ntuser_getusergroups, or ntuser_getdomaincontroller functions can lead to a denial of service or arbitrary code execution. The vulnerability has a CVSS score of 6.8, indicating a medium severity, with a network attack vector and medium attack complexity, potentially impacting confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, a Proof-of-Concept exploit is available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.