Description
Buffer underflow in the PHP_FILTER_TRIM_DEFAULT macro in the filtering extension (ext/filter) in PHP 5.2.0 allows context-dependent attackers to execute arbitrary code by calling filter_var with certain modes such as FILTER_VALIDATE_INT, which causes filter to write a null byte in whitespace that precedes the buffer.
Remediation
References
Related Vulnerabilities
MediaWiki Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2020-25827)
Handlebars Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-33938)
WordPress Plugin Car Demon Multiple Cross-Site Scripting Vulnerabilities (1.0.1)
Resin Application Server Other Vulnerability (CVE-2012-2966)
Apache HTTP Server Use of Uninitialized Resource Vulnerability (CVE-2020-1934)