# CVE-2007-1285 fix for 4.x

- Thread: https://externals.io/message/29633
- Original archive: https://news-web.php.net/php.internals/29633
- Started by Stanislav Malyshev on 2007-05-21T19:04:17+00:00
- Messages: 1
- Reply by email to internals@lists.php.net
- More for agents: search with https://externals.io/search.md?q={query} · JSON API at https://externals.io/api · documentation at https://externals.io/llms.txt

---

## #29633 — Stanislav Malyshev — 2007-05-21T19:04:17+00:00

URL: https://externals.io/message/29633#29633

The attached patch fixes CVE-2007-1285 (nesting variables in input 
crash) for 4.x branch - release notes say it's fixed but in fact it 
never was.

Objections?
-- 
Stanislav Malyshev, Zend Products Engineer
stas@zend.com  http://www.zend.com/