CVE-2003-0166 | BDVDB-2026-4995 Detail

Description#

Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via negative arguments to functions such as (1) socket_recv, (2) socket_recvfrom, and possibly other functions.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://marc.info/?l=bugtraq&m=104931415307111&w=2
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000691
http://marc.info/?l=bugtraq&m=104878100719467&w=2
http://www.securityfocus.com/bid/7198
http://marc.info/?l=bugtraq&m=104869828526885&w=2
http://www.securityfocus.com/bid/7197

Exploit#

No public exploit known

History#

Version 12003-03-27Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.