PHP 5.2.5 and prior : *printf() Integer Overflow !

Hi folks, today I focused my attention on this topic: PHP 5.2.5 and prior sprintf() integer overflow. SecurityReasons discovered this important vulnerability and published the advisory on its own site, here.

*printf() is used to format strings.

Again, it seems impossible that someone might find this kind of bugs; what I mean is that this vulnerability's typology  is pretty old (I'm referring to old C functions) and, so far, it should be a well known security background which everybody should have. I'm wondering what happen if the security engineers don't remember old and commons mistakes ? We will remake the same errors ?  Anyway, thank you to SecurityReason's guys who discovered this important vulnerability.