Description
php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or (3) COOKIE GPC variables that end in an open bracket character, which causes PHP to calculate an incorrect string length.
Remediation
References
Related Vulnerabilities
PHP Integer Overflow or Wraparound Vulnerability (CVE-2016-5770)
WordPress Plugin Safe SVG Cross-Site Scripting (1.9.5)
PHP hangs on parsing particular strings as floating point number
WordPress Plugin Simple Link Directory PHP Object Injection (5.5.0)
WordPress Plugin Form for WordPress-Zoho Forms Cross-Site Scripting (3.0)