Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple integer signedness errors in the printf function family in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 on 64 bit machines allow context-dependent attackers to execute arbitrary code via (1) certain negative argument numbers that arise in the php_formatted_print function because of 64 to 32 bit truncation, and bypass a check for the maximum allowable value; and (2) a width and precision of -1, which make it possible for the php_sprintf_appendstring function to place an internal buffer at an arbitrary memory location.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP Printf()函数多个整数符号类型错误漏洞
Vulnerability Description
64位机器上的PHP 4.4.5之前的4版本和PHP 5.2.1之前的5版本中的printf function family存在多个整数符号类型错误漏洞。 见机行事的攻击者可以借助特定的负值参数号，执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A