CVE-2002-0717

CVE-2002-0717 affects PHP versions 4.2.0 and 4.2.1, allowing remote attackers to trigger a denial of service and potentially execute arbitrary code. This vulnerability stems from improper handling of HTTP POST requests containing specific arguments within a multipart/form-data form, leading to an error condition and incorrect memory deallocation. With a CVSS score of 7.5, it is a high-severity issue, requiring no authentication and having low attack complexity, with potential impacts on confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness among security researchers.