high7.5Public exploit code

CVE-2003-0166

Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption) and possibly execu…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

PHP 4.x - 'socket_recvfrom()' Signed Integer Memory Corruption2003-03-26 · dos · php · Verified
PHP 4.x - 'socket_recv()' Signed Integer Memory Corruption2003-03-26 · dos · php · Verified
PHP 4.3 - 'socket_iovec_alloc()' Integer Overflow2003-03-25 · dos · php · Verified

Impact

Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via negative arguments to functions such as (1) socket_recv, (2) socket_recvfrom, and possibly other functions.

Affected products

Vendor	Product	Affected versions
Php	Php	Versions 4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5

Public exploit code

Impact

Affected products

References