Bug 191474

Summary: CVE-2006-1990 php wordwrap integer overflow
Product: Red Hat Enterprise Linux 2.1 Reporter: Joe Orton <jorton>
Component: phpAssignee: Joe Orton <jorton>
Status: CLOSED ERRATA QA Contact: David Lawrence <dkl>
Severity: medium Docs Contact:
Priority: medium    
Version: 2.1   
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard: source=bugtraq,reported=20060424,public=20060424,impact=moderate
Fixed In Version: RHSA-2006-0501 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2006-05-23 20:23:03 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 175040    

Description Joe Orton 2006-05-12 11:53:10 UTC 
+++ This bug was initially created as a clone of Bug #190033 +++

CVE-2006-1990 php multiple issues (CVE-2006-1991)

CVE-2006-1990 - wordwrap integer overflow
An integer overflow issue was discovered in PHP.  This issue could
potentially lead to arbitrary code execution as it allows overwriting
an arbitrary section of memory with user supplied data.  The
exploitability of this issue will depend on how a user program is
written to accept and process data passed to the wordwrap function.

...

http://www.infigo.hr/en/in_focus/advisories/INFIGO-2006-04-02

This issue also affects RHEL3
This issue also affects RHEL2.1
Comment 4 Red Hat Bugzilla 2006-05-23 20:23:04 UTC 
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHSA-2006-0501.html