CVE-2008-1384: Integer Overflow
Integer overflow in PHP 5.2.5 and earlier allows context-dependent attackers to cause a denial of service and possibly have unspecified other impact via a printf format parameter with a large width specifier, related to the phpsprintfappendstring function in formattedprint.c and probably other functions for formatted strings (aka printf functions).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-1384?
CVE-2008-1384 is classified as a medium severity vulnerability primarily causing denial of service.
How do I fix CVE-2008-1384?
To mitigate CVE-2008-1384, upgrade PHP to version 5.2.6 or later.
What are the impacts of CVE-2008-1384?
CVE-2008-1384 can lead to denial of service and potentially other unspecified impacts.
Which versions of PHP are affected by CVE-2008-1384?
CVE-2008-1384 affects PHP versions up to and including 5.2.5.
How does the integer overflow in CVE-2008-1384 occur?
The integer overflow in CVE-2008-1384 occurs due to a large width specifier in the printf format parameter.