---
title: "CVE-2007-3806\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2007-3806?format=md
keywords: index, follow
---

# CVE-2007-3806

Publication date 17 July 2007

Last updated 24 July 2024

---

Ubuntu priority

**Medium**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

The glob function in PHP 5.2.3 allows context-dependent attackers to cause
a denial of service and possibly execute arbitrary code via an invalid
value of the flags parameter, probably related to memory corruption or an
invalid read on win32 platforms, and possibly related to lack of
initialization for a glob structure.

[Read the notes from the security team](https://ubuntu.com/security/CVE-2007-3806?format=md#notes)

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| php4 | 8.04 LTS hardy | Not in release |
| 7.10 gutsy | Not in release |
| 7.04 feisty | Not in release |
| 6.06 LTS dapper | Not affected |
| php5 | 8.04 LTS hardy | Not affected |
| 7.10 gutsy | Not affected |
| 7.04 feisty | Not affected |
| 6.06 LTS dapper | Not affected |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## Notes

---

### [jdstrand](https://launchpad.net/~jdstrand)

Windows only

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3806)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2007-3806)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2007-3806)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2007-3806)

### Other references

* <https://www.cve.org/CVERecord?id=CVE-2007-3806>