Description
PHP 4.2.0 and 4.2.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an HTTP POST request with certain arguments in a multipart/form-data form, which generates an error condition that is not properly handled and causes improper memory to be freed.
References
- 20020722 PHP Security Advisory: Vulnerability in PHP versions 4.2.0 and 4.2.1 mailing-list
- CA-2002-21 third-party-advisory
- 20020722 Advisory 02/2002: PHP remote vulnerability mailing-list
- VU#929115 third-party-advisory
- php-multipart-handler-bo(9635) vdb-entry