CVE-2003-0166 in PHP

Sumário (Inglês)

Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via negative arguments to functions such as (1) socket_recv, (2) socket_recvfrom, and possibly other functions.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Reservar

26/03/2003

Divulgação

02/04/2003

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
22	PHP socket_iovec_alloc() Execução remota de código	192	Prova de conceito	Correção oficial	CVE-2003-0166

Fontes

• MITRE
• NVD
• CVE Details