CVE-2006-4020
- State
- Published
- Severity
- Not scored
- Published
- Aug 8, 2006
- Updated
- Aug 7, 2024
- Reserved
- Aug 8, 2006
Description
scanf.c in PHP 5.1.4 and earlier, and 4.4.3 and earlier, allows context-dependent attackers to execute arbitrary code via a sscanf PHP function call that performs argument swapping, which increments an index past the end of an array and triggers a buffer over-read.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 1016984vdb-entry
- http://www.plain-text.info/sscanf_bug.txt
- http://www.php.net/release_5_1_5.php
- 19415vdb-entry
- 21768third-party-advisory
- 21403third-party-advisory
- RHSA-2006:0669vendor-advisory
- MDKSA-2006:144vendor-advisory
- oval:org.mitre.oval:def:11062vdb-entrysignature
- 21847third-party-advisory
- SUSE-SR:2006:020vendor-advisory
- 22487third-party-advisory
- USN-342-1vendor-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-221.htm
- 22039third-party-advisory
- RHSA-2006:0688vendor-advisory
- http://bugs.php.net/bug.php?id=38322
- 21683third-party-advisory
- 23247third-party-advisory
- 21467third-party-advisory
- SUSE-SR:2006:019vendor-advisory
- 22004third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-222.htm
- 22538third-party-advisory
- RHSA-2006:0682vendor-advisory
- 21546third-party-advisory
- 21608third-party-advisory
- 22440third-party-advisory
- 22069third-party-advisory
- 20060804 php local buffer underflow could lead to arbitary code executionmailing-list
- http://support.avaya.com/elmodocs2/security/ASA-2006-223.htm
- SUSE-SR:2006:022vendor-advisory
- ADV-2006-3193vdb-entry
- http://www.php.net/ChangeLog-5.php#5.1.5
- GLSA-200608-28vendor-advisory
- 1341third-party-advisory
- RHSA-2006:0736vendor-advisory
- SUSE-SA:2006:052vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.