Vulnerability in Php
CVE-2003-1303
Buffer overflow in the imap_fetch_overview function in the IMAP functionality (php_imap.c) in PHP before 4.3.3 allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long e-mail address in a (1) To or (2) From header.
EPSS: 0.121 (95.7th percentile) — read the EPSS interpretation.
Affected products
- Php — versions 4.3.0, 4.3.1, 4.3.2
- N/a — versions n/a
References
- secalert@redhat.com (x_refsource_CONFIRM, Exploit)
- secalert@redhat.com (x_refsource_OVAL, signature, vdb-entry)
- secalert@redhat.com (x_refsource_CONFIRM, Patch)