CVE-2003-0166 in PHP
Summary
Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via negative arguments to functions such as (1) socket_recv, (2) socket_recvfrom, and possibly other functions.
Reservation
03/26/2003
Disclosure
04/02/2003
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 22 | PHP socket_iovec_alloc() integer coercion | 192 | Proof-of-Concept | Official fix | CVE-2003-0166 |