Description
Buffer overflow in the imap_fetch_overview function in the IMAP functionality (php_imap.c) in PHP before 4.3.3 allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long e-mail address in a (1) To or (2) From header.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 4 | php +13 | 4.3.9-3.12 | RHSA-2006:0276 |
| RHEL 3 | php +6 | 4.3.2-30.ent | RHSA-2006:0276 |
Advisories 1
- RHSA-2006:0276 Red Hat Security Advisory: php security update Red Hat Security Advisories (RHSA) · Jun 29, 2026