Description
Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unserialize function, which triggers the overflow in the ZVAL reference counter.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Forum Server 'edit_post_id' Parameter SQL Injection (1.7)
Django Improper Handling of Case Sensitivity Vulnerability (CVE-2026-8404)
OpenSSL Observable Discrepancy Vulnerability (CVE-2003-0078)
PHP Out-of-bounds Read Vulnerability (CVE-2019-11050)
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2009-2432)