CVE-2008-0599: php: buffer overflow in a CGI path translation

Severity: Critical

CVSS Score: 9.8

The init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly consider operator precedence when calculating the length of PATH_TRANSLATED, which might allow remote attackers to execute arbitrary code via a crafted URI.