CVE-2003-0166
Php - Denial of Service
Title source: ruleDescription
Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via negative arguments to functions such as (1) socket_recv, (2) socket_recvfrom, and possibly other functions.
Exploits (3)
References (6)
Scores
EPSS
0.2661
EPSS Percentile
96.4%
Details
Status
published
Products (17)
php/php
4.0
php/php
4.0.1
php/php
4.0.2
php/php
4.0.3
php/php
4.0.4
php/php
4.0.5
php/php
4.0.6
php/php
4.0.7
php/php
4.1.0
php/php
4.1.1
... and 7 more
Published
Apr 02, 2003
Tracked Since
Feb 18, 2026