CVE-2006-5465

Buffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted UTF-8 inputs to the (1) htmlentities or (2) htmlspecialchars functions.

🔗 References (96)

• secalert@redhatftp://patches.sgi.com/support/free/security/advisories/20061101-01-P
• secalert@redhathttp://docs.info.apple.com/article.html?artnum=304829
• secalert@redhathttp://issues.rpath.com/browse/RPL-761
• secalert@redhathttp://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html
• secalert@redhathttp://rhn.redhat.com/errata/RHSA-2006-0736.html
• secalert@redhathttp://secunia.com/advisories/22653
• secalert@redhathttp://secunia.com/advisories/22685
• secalert@redhathttp://secunia.com/advisories/22688
• secalert@redhathttp://secunia.com/advisories/22693
• secalert@redhathttp://secunia.com/advisories/22713
• secalert@redhathttp://secunia.com/advisories/22753
• secalert@redhathttp://secunia.com/advisories/22759
• secalert@redhathttp://secunia.com/advisories/22779
• secalert@redhathttp://secunia.com/advisories/22881
• secalert@redhathttp://secunia.com/advisories/22929