Description

Multiple integer overflows in the chunk_split function in PHP 5 before 5.2.3 and PHP 4 before 4.4.8 allow remote attackers to cause a denial of service (crash) or execute arbitrary code via the (1) chunks, (2) srclen, and (3) chunklen arguments.

Remediation

References

CVE-2007-2872

Related Vulnerabilities

WordPress Plugin Advanced Classifieds & Directory Pro Unspecified Vulnerability (1.6.5)

WordPress Plugin Wordpress Uninstall Cross-Site Request Forgery (1.2.1)

WordPress Plugin Fusion:Extension-Gallery Multiple Unspecified Vulnerabilities (1.0.4)

WordPress Plugin File Manager Unspecified Vulnerability (3.0)

Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-5494)

Severity

Medium

Classification

CVE-2007-2872

Tags

Missing Update Known Vulnerabilities