CVE-2010-1866: Integer Overflow
The dechunk filter in PHP 5.3 through 5.3.2, when decoding an HTTP chunked encoding stream, allows context-dependent attackers to cause a denial of service (crash) and possibly trigger memory corruption via a negative chunk size, which bypasses a signed comparison, related to an integer overflow in the chunk size decoder.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-1866?
CVE-2010-1866 has a severity rating that indicates a denial of service risk and potential for memory corruption.
How do I fix CVE-2010-1866?
To fix CVE-2010-1866, upgrade PHP to version 5.3.3 or later where this vulnerability is addressed.
Which versions of PHP are affected by CVE-2010-1866?
CVE-2010-1866 affects PHP versions 5.3.0 to 5.3.2.
What type of vulnerability is CVE-2010-1866?
CVE-2010-1866 is classified as a denial of service vulnerability due to improper handling of HTTP chunked encoding.
Can CVE-2010-1866 lead to other security issues?
While primarily a denial of service vulnerability, CVE-2010-1866 could potentially lead to memory corruption which may be exploitable.