Description
Multiple integer overflows in the chunk_split function in PHP 5 before 5.2.3 and PHP 4 before 4.4.8 allow remote attackers to cause a denial of service (crash) or execute arbitrary code via the (1) chunks, (2) srclen, and (3) chunklen arguments.
Remediation
References
Related Vulnerabilities
MySQL CVE-2018-3186 Vulnerability (CVE-2018-3186)
Moodle Improper Access Control Vulnerability (CVE-2016-3729)
Liferay Portal Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-15839)
Oracle Application Server Other Vulnerability (CVE-2001-0591)
WordPress Plugin WordPress Photo Gallery by Gallery Bank SQL Injection (3.0.229)