CVE Vulnerabilities

CVE-2003-0166

Published: Apr 02, 2003 | Modified: Oct 30, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via negative arguments to functions such as (1) socket_recv, (2) socket_recvfrom, and possibly other functions.

Affected Software

Name Vendor Start Version End Version
Php Php 4.0 4.0
Php Php 4.0.1 4.0.1
Php Php 4.0.2 4.0.2
Php Php 4.0.3 4.0.3
Php Php 4.0.4 4.0.4
Php Php 4.0.5 4.0.5
Php Php 4.0.6 4.0.6
Php Php 4.0.7 4.0.7
Php Php 4.1.0 4.1.0
Php Php 4.1.1 4.1.1
Php Php 4.1.2 4.1.2
Php Php 4.2.0 4.2.0
Php Php 4.2.1 4.2.1
Php Php 4.2.2 4.2.2
Php Php 4.2.3 4.2.3
Php Php 4.3.0 4.3.0
Php Php 4.3.1 4.3.1

References