Description
The chunk_split function in string.c in PHP 5.2.3 does not properly calculate the needed buffer size due to precision loss when performing integer arithmetic with floating point numbers, which has unknown attack vectors and impact, possibly resulting in a heap-based buffer overflow. NOTE: this is due to an incomplete fix for CVE-2007-2872.
Remediation
References
Related Vulnerabilities
Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-12167)
WordPress Plugin Image Photo Gallery Final Tiles Grid Security Bypass (3.3.52)
Jboss EAP Improper Input Validation Vulnerability (CVE-2011-4314)
WordPress Plugin rtMedia for WordPress, BuddyPress and bbPress SQL Injection (3.7.39)