Every CVE Search/ Get API key

CVE-2003-1303

Buffer overflow in the imap_fetch_overview function in the IMAP functionality (php_imap.c) in PHP...

5.0 MediumFix available

Buffer overflow in the imap_fetch_overview function in the IMAP functionality (php_imap.c) in PHP before 4.3.3 allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long e-mail address in a (1) To or (2) From header.

Exploit likelihood

12.1%Up 7.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

Buffer overflow in the imap_fetch_overview function in the IMAP functionality (php_imap.c) in PHP before 4.3.3 allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long e-mail address in a (1) To or (2) From header.

Record
CVE-2003-1303
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

Buffer overflow in the imap_fetch_overview function in the IMAP functionality (php_imap.c) in PHP before 4.3.3 allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long e-mail address in a (1) To or (2) From header.

Record
CVE-2003-1303
Updated
2026-11-02
EUVDEUVD-2003-1293 No score

Buffer overflow in the imap_fetch_overview function in the IMAP functionality (php_imap.c) in PHP before 4.3.3 allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long e-mail address in a (1) To or (2) From header.

Record
EUVD-2003-1293
Updated
2026-11-03
GitHub AdvisoriesGHSA-ch3f-x93w-643v No score

Buffer overflow in the imap_fetch_overview function in the IMAP functionality (php_imap.c) in PHP...

Buffer overflow in the imap_fetch_overview function in the IMAP functionality (php_imap.c) in PHP before 4.3.3 allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long e-mail address in a (1) To or (2) From header.

Record
GHSA-ch3f-x93w-643v
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
php
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php-debuginfo
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php-devel
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php-imap
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php-ldap
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php-mysql
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php-odbc
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php-pgsql
Red Hat:enterprise_linux:3::as
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
Show 82 moreShow less
Affected packages
PackageAffectedFixed
php-devel
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php-imap
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php-ldap
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php-mysql
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php-odbc
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php-pgsql
Red Hat:enterprise_linux:3::desktop
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php-debuginfo
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php-devel
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php-imap
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php-ldap
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php-mysql
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php-odbc
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php-pgsql
Red Hat:enterprise_linux:3::es
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php-debuginfo
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php-devel
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php-imap
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php-ldap
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php-mysql
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php-odbc
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php-pgsql
Red Hat:enterprise_linux:3::ws
 before 0:4.3.2-30.ent
0:4.3.2-30.ent
php
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-devel
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-domxml
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-gd
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-imap
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-ldap
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-mbstring
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-mysql
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-ncurses
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-odbc
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-pear
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-pgsql
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-snmp
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-xmlrpc
Red Hat:enterprise_linux:4::as
 before 0:4.3.9-3.12
0:4.3.9-3.12
php
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-devel
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-domxml
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-gd
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-imap
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-ldap
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-mbstring
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-mysql
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-ncurses
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-odbc
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-pear
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-pgsql
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-snmp
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-xmlrpc
Red Hat:enterprise_linux:4::desktop
 before 0:4.3.9-3.12
0:4.3.9-3.12
php
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-devel
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-domxml
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-gd
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-imap
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-ldap
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-mbstring
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-mysql
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-ncurses
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-odbc
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-pear
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-pgsql
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-snmp
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-xmlrpc
Red Hat:enterprise_linux:4::es
 before 0:4.3.9-3.12
0:4.3.9-3.12
php
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-devel
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-domxml
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-gd
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-imap
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-ldap
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-mbstring
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-mysql
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-ncurses
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-odbc
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-pear
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-pgsql
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-snmp
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.12
0:4.3.9-3.12
php-xmlrpc
Red Hat:enterprise_linux:4::ws
 before 0:4.3.9-3.12
0:4.3.9-3.12

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2003-1303 is a medium vulnerability (CVSS 5.0) in Php, published December 31, 2003. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 12.1%, the 96th percentile. Fixed in php 0:4.3.2-30.ent.

References

Show 32 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open