Description
Integer signedness error in the _zend_mm_alloc_int function in the Zend Memory Manager in PHP 5.2.0 allows remote attackers to execute arbitrary code via a large emalloc request, related to an incorrect signed long cast, as demonstrated via the HTTP SOAP client in PHP, and via a call to msg_receive with the largest positive integer value of maxsize.
Remediation
References
Related Vulnerabilities
WordPress Plugin DM Albums 'album.php' Remote File Inclusion (1.9.2)
Oracle HTTP Server Other Vulnerability (CVE-2002-0659)
WordPress Plugin Icon Widget Cross-Site Scripting (1.2.6)
WordPress Plugin Under Construction Unspecified Vulnerability (3.25)
Squid Missing Authentication for Critical Function Vulnerability (CVE-2019-12524)