CVE Catalog
CVE-2016-4345
CriticalSummary
Integer overflow in the php_filter_encode_url function in PHP before version 7.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long string, leading to a heap-based buffer overflow.
Risk Assessment
Organizations may be vulnerable to attacks that lead to denial of service, affecting the availability of PHP-based applications and services.
Recommendation
It is recommended to upgrade PHP to version 7.0.4 or later to mitigate this vulnerability.
Original NVD description (English source)
Integer overflow in the php_filter_encode_url function in ext/filter/sanitizing_filters.c in PHP before 7.0.4 allows remote attackers to cause a denial of service or possibly have unspecified other impact via a long string, leading to a heap-based buffer overflow.