← Database

CVE-2003-0166

HIGH CVSS: 7.5 Published: 2003-04-02 Modified: 2026-06-16

Description

Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via negative arguments to functions such as (1) socket_recv, (2) socket_recvfrom, and possibly other functions.

Affected Platforms

Php Php

Weakness Type

NVD-CWE-Other

References