PHP Numeric Errors Vulnerability - CVE-2016-1904 - Vulnerability Database

PHP Numeric Errors Vulnerability - CVE-2016-1904

High
Reference: CVE-2016-1904
Title: PHP Numeric Errors Vulnerability
Overview:

Multiple integer overflows in ext/standard/exec.c in PHP 7.x before 7.0.2 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a long string to the (1) php_escape_shell_cmd or (2) php_escape_shell_arg function leading to a heap-based buffer overflow.