PHP is prone to an integer-overflow vulnerability because it fails to ensure that integer values are not overrun. Successful exploits of this vulnerability allow remote attackers to execute arbitrary code in the context of a webserver affected by the issue. Failed attempts will likely result in denial-of-service conditions. Versions prior to PHP 5.3.6 are vulnerable.

Updates are available. Please see the references for more information.

• http://comments.gmane.org/gmane.comp.security.oss.general/4436
• http://svn.php.net/viewvc/?view=revision&revision=309018
• http://www.php.net/
• https://www.securityfocus.com/bid/46786

---

Updated on 2015-03-25