CVE-2003-0166
PHP - Denial of Service and Possible Remote Code Execution via Negative Arguments to socket_recv and socket_recvfrom
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2003-0166. PoCs published by Sir Mordred.
AI-analyzed exploit summary This exploit demonstrates an integer overflow vulnerability in PHP's socket_recvfrom() function, which can lead to memory corruption and potentially a denial of service or arbitrary code execution. The PoC triggers the vulnerability by passing a negative value as the buffer length.
Description
Integer signedness error in emalloc() function for PHP before 4.3.2 allow remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via negative arguments to functions such as (1) socket_recv, (2) socket_recvfrom, and possibly other functions.
Exploits (3)
This exploit demonstrates an integer overflow vulnerability in PHP's socket_recvfrom() function, which can lead to memory corruption and potentially a denial of service or arbitrary code execution. The PoC triggers the vulnerability by passing a negative value as the buffer length.
This exploit demonstrates an integer overflow vulnerability in PHP's socket_recv() function, which can lead to memory corruption and potentially arbitrary code execution. The PoC triggers the issue by passing a negative length value (-3) to the function.
This exploit targets an integer overflow vulnerability in PHP's socket_iovec_alloc() function, which can lead to memory corruption and potentially arbitrary code execution. The PoC triggers the issue by passing a large integer value (0x20000000) to the function.