{"id":"CVE-2016-1904","aliases":["EUVD-2016-2997","GHSA-hmwm-ccmh-23mq"],"status":"published","title":"Multiple integer overflows in ext/standard/exec.c in PHP 7.x before 7.0.2 allow remote attackers...","description":"Multiple integer overflows in ext/standard/exec.c in PHP 7.x before 7.0.2 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a long string to the (1) php_escape_shell_cmd or (2) php_escape_shell_arg function, leading to a heap-based buffer overflow.","severity":{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02733,"percentile":0.86196,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-189"],"published":"2016-01-19T02:00:00Z","modified":"2026-10-20T13:13:14Z","products":[{"vendor":"php","product":"php"}],"references":[{"url":"http://www.php.net/ChangeLog-7.php","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://github.com/php/php-src/commit/2871c70efaaaa0f102557a17c727fd4d5204dd4b","tags":["x_refsource_CONFIRM","x_transferred","fix"]},{"url":"http://www.openwall.com/lists/oss-security/2016/01/14/8","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://bugs.php.net/bug.php?id=71270","tags":["x_refsource_CONFIRM","x_transferred","Exploit","evidence"]},{"url":"http://www.securitytracker.com/id/1034608","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1904"},{"url":"https://github.com/advisories/GHSA-hmwm-ccmh-23mq"}],"sources":{"cve":[{"id":"CVE-2016-1904","description":"Multiple integer overflows in ext/standard/exec.c in PHP 7.x before 7.0.2 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a long string to the (1) php_escape_shell_cmd or (2) php_escape_shell_arg function, leading to a heap-based buffer overflow.","status":"published","published":"2016-01-19T02:00:00Z","modified":"2024-08-05T23:10:40.037Z","updated_at":"2026-11-02T14:33:35.841056Z"}],"euvd":[{"id":"EUVD-2016-2997","description":"Multiple integer overflows in ext/standard/exec.c in PHP 7.x before 7.0.2 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a long string to the (1) php_escape_shell_cmd or (2) php_escape_shell_arg function, leading to a heap-based buffer overflow.","status":"published","published":"2016-01-19T02:00:00Z","modified":"2024-08-05T23:10:40Z","updated_at":"2026-11-03T02:22:55.100655Z"}],"ghsa":[{"id":"GHSA-hmwm-ccmh-23mq","title":"Multiple integer overflows in ext/standard/exec.c in PHP 7.x before 7.0.2 allow remote attackers...","description":"Multiple integer overflows in ext/standard/exec.c in PHP 7.x before 7.0.2 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a long string to the (1) php_escape_shell_cmd or (2) php_escape_shell_arg function, leading to a heap-based buffer overflow.","status":"published","published":"2022-05-17T03:24:13Z","modified":"2023-01-27T05:07:43Z","cvss":[{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T14:43:10.83298Z"}],"nvd":[{"id":"CVE-2016-1904","description":"Multiple integer overflows in ext/standard/exec.c in PHP 7.x before 7.0.2 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a long string to the (1) php_escape_shell_cmd or (2) php_escape_shell_arg function, leading to a heap-based buffer overflow.","status":"published","published":"2016-01-19T05:59:09.373Z","modified":"2026-06-17T00:42:50.03Z","cvss":[{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-189"],"updated_at":"2026-11-02T14:03:21.143462Z"}],"osv":[{"id":"CVE-2016-1904","description":"Multiple integer overflows in ext/standard/exec.c in PHP 7.x before 7.0.2 allow remote attackers to cause a denial of service or possibly have unspecified other impact via a long string to the (1) php_escape_shell_cmd or (2) php_escape_shell_arg function, leading to a heap-based buffer overflow.","status":"published","published":"2016-01-19T05:59:09.373Z","modified":"2026-10-20T13:13:14.278986373Z","cvss":[{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:44:02.114472Z"}]}}