CVE-2002-0717: High severity PHP PHP vulnerability

Published Jul 23, 2002

Updated

PHP 4.2.0 and 4.2.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP POST request with certain arguments in a multipart/form-data form, which generates an error condition that is not properly handled and causes improper memory to be freed.

Affected Software

2 affected components

PHP PHP=4.2.0

PHP PHP=4.2.1

Event History

Jul 23, 2002

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-0717?

CVE-2002-0717 is considered a high severity vulnerability due to its potential to allow denial of service and arbitrary code execution.

How do I fix CVE-2002-0717?

To mitigate CVE-2002-0717, upgrade to a newer version of PHP that is not affected by this vulnerability.

What software versions are affected by CVE-2002-0717?

CVE-2002-0717 affects PHP versions 4.2.0 and 4.2.1.

Can CVE-2002-0717 be exploited remotely?

Yes, CVE-2002-0717 can be exploited remotely through specially crafted HTTP POST requests.

What impact does CVE-2002-0717 have on web applications?

CVE-2002-0717 can cause a denial of service and may allow attackers to execute arbitrary code on vulnerable web applications.