cve/cves/2003/CVE-2003-0166.md

CVE-2003-0166

Description

Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via negative arguments to functions such as (1) socket_recv, (2) socket_recvfrom, and possibly other functions.

POC

Reference

No PoCs from references.

Github

No PoCs found on GitHub currently.

ExploitDB

• https://www.exploit-db.com/exploits/22426
• https://www.exploit-db.com/exploits/22425
• https://www.exploit-db.com/exploits/22419