3 matches found
Internet Bug Bounty: Heap overflow due to integer overflow in bzdecompress() function
The fix for this bug has been committed: https://bugs.php.net/bug.php?id=73386 Description: ------------ I have found some vulnerable code at bzdecompress function in module Bzip2. bzdecompress function creates a new zendstring object to store decompressed data. The size of destination string...
PHP 'bzdecompress()' function integer overflow vulnerability
PHP is an open source general-purpose computer scripting language. An integer overflow vulnerability in the PHP 'bzdecompress' function allows an attacker to exploit the vulnerability to execute arbitrary code in the context of a user's affected application, or a failed attack will result in a...