CVE-2006-5465
- State
- Published
- Severity
- Not scored
- Published
- Nov 4, 2006
- Updated
- Aug 7, 2024
- Reserved
- Oct 23, 2006
Description
Buffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted UTF-8 inputs to the (1) htmlentities or (2) htmlspecialchars functions.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 22881third-party-advisory
- 1017152vdb-entry
- ADV-2006-4750vdb-entry
- ADV-2006-4749vdb-entry
- 20061102 Advisory 13/2006: PHP HTML Entity Encoder Heap Overflow Vulnerabilitymailing-list
- RHSA-2006:0731vendor-advisory
- 22759third-party-advisory
- 24606third-party-advisory
- ADV-2007-1546vdb-entry
- http://docs.info.apple.com/article.html?artnum=304829
- TLSA-2006-38vendor-advisory
- DSA-1206vendor-advisory
- 22693third-party-advisory
- 23247third-party-advisory
- 22653third-party-advisory
- 22688third-party-advisory
- 2006-0061vendor-advisory
- 20061129 SYM06-023, Symantec NetBackup PureDisk: PHP update to Address Reported Security Vulnerabilitymailing-list
- GLSA-200703-21vendor-advisory
- 20061109 rPSA-2006-0205-1 php php-mysql php-pgsqlmailing-list
- 22713third-party-advisory
- 22685third-party-advisory
- ADV-2006-4317vdb-entry
- http://www.hardened-php.net/advisory_132006.138.html
- 20070425 PHP HTML Entity Encoder Heap Overflow Vulnerability in Multiple Web-Based Management Interfacesvendor-advisory
- http://issues.rpath.com/browse/RPL-761
- SUSE-SA:2006:067vendor-advisory
- php-htmlentities-bo(29971)vdb-entry
- 23155third-party-advisory
- MDKSA-2006:196vendor-advisory
- 25047third-party-advisory
- 1017296vdb-entry
- 22779third-party-advisory
- RHSA-2006:0730vendor-advisory
- 20879vdb-entry
- USN-375-1vendor-advisory
- APPLE-SA-2006-11-28vendor-advisory
- 20070425 Cisco Applied Intelligence Response: Identifying and Mitigating Exploitation of the PHP HTML Entity Encoder Heap Overflow Vulnerability in Multiple Web-Based Management Interfacesvendor-advisory
- TA06-333Athird-party-advisory
- OpenPKG-SA-2006.028vendor-advisory
- 22929third-party-advisory
- 22753third-party-advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-245.htm
- oval:org.mitre.oval:def:10240vdb-entrysignature
- 23139third-party-advisory
- RHSA-2006:0736vendor-advisory
- http://www.php.net/releases/5_2_0.php
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.