VYPR
← All advisories
Critical severity9.8NVD Advisory· Published May 7, 2010· Updated Jun 16, 2026

CVE-2010-1866

CVE-2010-1866

Description

The dechunk filter in PHP 5.3 through 5.3.2, when decoding an HTTP chunked encoding stream, allows context-dependent attackers to cause a denial of service (crash) and possibly trigger memory corruption via a negative chunk size, which bypasses a signed comparison, related to an integer overflow in the chunk size decoder.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • PHP/PHP2 versions
    cpe:2.3:a:php:php:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:php:php:*:*:*:*:*:*:*:*range: >=5.3.0,<=5.3.2
    • (no CPE)range: >=5.3, <=5.3.2
  • OpenSUSE/openSUSE3 versions
    cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*
    • cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*
    • cpe:2.3:o:opensuse:opensuse:11.3:*:*:*:*:*:*:*
  • SUSE S.A./Linux Enterprise Desktop3 versions
    cpe:2.3:o:suse:linux_enterprise:10.0:sp3:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:suse:linux_enterprise:10.0:sp3:*:*:*:*:*:*
    • cpe:2.3:o:suse:linux_enterprise:11.0:-:*:*:*:*:*:*
    • cpe:2.3:o:suse:linux_enterprise:11.0:sp1:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.