critical9.8Public exploit code
CVE-2010-1866
The dechunk filter in PHP 5.3 through 5.3.2, when decoding an HTTP chunked encoding stream, allows context-dependent attackers to cause a denial of service (cr…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP 5.3 - 'PHP_dechunk()' HTTP Chunked Encoding Integer Overflow2010-05-02 · remote · php · Verified
Impact
The dechunk filter in PHP 5.3 through 5.3.2, when decoding an HTTP chunked encoding stream, allows context-dependent attackers to cause a denial of service (crash) and possibly trigger memory corruption via a negative chunk size, which bypasses a signed comparison, related to an integer overflow in the chunk size decoder.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Php | Php | from 5.3.0 through 5.3.2 |
| Opensuse | Opensuse | Versions 11.1, 11.2, 11.3 |
| Suse | Linux Enterprise | Versions 10.0, 11.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
- http://php-security.org/2010/05/02/mops-2010-003-php-dechunk-filter-signed-comparison-vulnerability/index.html
- http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html
- http://php-security.org/2010/05/02/mops-2010-003-php-dechunk-filter-signed-comparison-vulnerability/index.html