PHP Chunk_Split() Function Integer Overflow Vulnerability

PHP Chunk_Split() Function Integer Overflow Vulnerability

References:

ChangeLog Version 5.2.3 (PHP)
PHP 5.2.3 Release Announcement (PHP)
PHP 5.2.4 Release Announcement (PHP)
PHP Homepage (PHP)
PHP Version 5.2.4 Changelog (PHP)
SEC Consult SA-20070601-0 :: PHP chunk_split() integer overflow (research@sec-consult.com)
[security bulletin] HPSBUX02332 SSRT080056 rev.2 - HP-UX Running Apache With PHP (security-alert@hp.com)
[USN-549-1] PHP vulnerabilities (Kees Cook )
ASA-2007-449 PHP security updates (RHSA-2007-0888, RHSA-2007-0889 & RHSA-2007-08 (Avaya)
HPSBUX02308 SSRT080010 rev.1 - HP-UX Running Apache, Remote Execution of Arbitra (HP)
RHSA-2007:0888-2 - php security update (Red Hat)
RHSA-2007:0889-5 php security update (Red Hat)
RHSA-2007:0890-2 php security update (Red Hat)
RHSA-2007:0891-5 php security update (Red Hat)
SUSE Security Advisory SUSE-SA:2008:004 (SUSE)
SUSE Security Announcement SUSE-SA:2007:044 (SUSE)

Privacy Statement
Copyright 2010, SecurityFocus