CVE-2006-5465
high · 7.5Buffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted UTF-8 inputs to the (1) htmlentities or (2) htmlspecialchars functions.
7.5
CVSS
10.3%
EPSS (exploit prob.)
96th
EPSS percentile
2006-11-04
Published
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| php | php | <= 5.1.6 |
| php | php | 5.0 |
| php | php | 5.0 |
| php | php | 5.0 |
| php | php | 5.0.0 |
| php | php | 5.0.1 |
| php | php | 5.0.2 |
| php | php | 5.0.3 |
| php | php | 5.0.4 |
| php | php | 5.0.5 |
| php | php | 5.1.0 |
| php | php | 5.1.1 |
| php | php | 5.1.2 |
| php | php | 5.1.3 |
| php | php | 5.1.4 |
| php | php | 5.1.5 |
Check a specific version with /api/v1/cve/match.
References
- ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P
- http://docs.info.apple.com/article.html?artnum=304829
- http://issues.rpath.com/browse/RPL-761
- http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html
- http://rhn.redhat.com/errata/RHSA-2006-0736.html
- http://secunia.com/advisories/22653
- http://secunia.com/advisories/22685
- http://secunia.com/advisories/22688
- http://secunia.com/advisories/22693
- http://secunia.com/advisories/22713
- http://secunia.com/advisories/22753
- http://secunia.com/advisories/22759
- http://secunia.com/advisories/22779
- http://secunia.com/advisories/22881
- http://secunia.com/advisories/22929
- http://secunia.com/advisories/23139
- http://secunia.com/advisories/23155
- http://secunia.com/advisories/23247
- http://secunia.com/advisories/24606
- http://secunia.com/advisories/25047
- http://security.gentoo.org/glsa/glsa-200703-21.xml
- http://securitytracker.com/id?1017152
- http://securitytracker.com/id?1017296
- http://support.avaya.com/elmodocs2/security/ASA-2006-245.htm
- http://www.cisco.com/en/US/products/products_security_response09186a008082c4fe.html
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2006-5465