NetSight
IP …
medium6.8Public exploit code

CVE-2007-2872

Multiple integer overflows in the chunk_split function in PHP 5 before 5.2.3 and PHP 4 before 4.4.8 allow remote attackers to cause a denial of service (crash)…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Multiple integer overflows in the chunk_split function in PHP 5 before 5.2.3 and PHP 4 before 4.4.8 allow remote attackers to cause a denial of service (crash) or execute arbitrary code via the (1) chunks, (2) srclen, and (3) chunklen arguments.

Affected products

VendorProductAffected versions
PhpPhp
through 4.4.7
Versions 5.0.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4

Weakness classification

CWE-189

References