>> PHP "ecalloc()" Function Data Handling Remote Integer Overflow Vulnerability
Title : PHP "ecalloc()" Function Data Handling Remote Integer Overflow Vulnerability VUPEN ID : VUPEN/ADV-2006-3922 CVE ID : CVE-2006-4812
Rated as : High Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2006-10-05
Technical Description
A vulnerability has been identified in PHP, which could be exploited by remote attackers to execute arbitrary commands. This flaw is due to an integer overflow error in the "ecalloc()" [zend_alloc.c] function that does not properly validate user-supplied data before being used to allocate memory, which could be exploited by remote attackers to compromise a vulnerable server via certain PHP scripts.
Subscribe to VUPEN VNS and receive real-time e-mail and SMS alerts when new advisories or patches relevant to your systems and network configurations are available.
Feedback If you have additional information or corrections for this security advisory please submit them via our contact form.
