CVE-2006-5465

Published: Nov 4, 2006Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted UTF-8 inputs to the (1) htmlentities or (2) htmlspecialchars functions.

Affected (16)

Products: Php: Php

Php

1 product

Php

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Php Php	Up to 5.1.6
Php Php	Version 5.0.0
Php Php	Version 5.0.1
Php Php	Version 5.0.2
Php Php	Version 5.0.3
Php Php	Version 5.0.4
Php Php	Version 5.0.5
Php Php	Version 5.0 rc1
Php Php	Version 5.0 rc2
Php Php	Version 5.0 rc3
Php Php	Version 5.1.0
Php Php	Version 5.1.1
Php Php	Version 5.1.2
Php Php	Version 5.1.3
Php Php	Version 5.1.4
Php Php	Version 5.1.5

References (96)

ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P (unsafe URL)

Source: secalert@redhat.com

http://docs.info.apple.com/article.html?artnum=304829

Source: secalert@redhat.com

http://issues.rpath.com/browse/RPL-761

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2006/Nov/msg00001.html

Source: secalert@redhat.com

http://rhn.redhat.com/errata/RHSA-2006-0736.html

Source: secalert@redhat.com

http://secunia.com/advisories/22653

Source: secalert@redhat.com

http://secunia.com/advisories/22685

Source: secalert@redhat.com

http://secunia.com/advisories/22688

Source: secalert@redhat.com

http://secunia.com/advisories/22693

Source: secalert@redhat.com

http://secunia.com/advisories/22713

Source: secalert@redhat.com

http://secunia.com/advisories/22753

Source: secalert@redhat.com

http://secunia.com/advisories/22759

Source: secalert@redhat.com

http://secunia.com/advisories/22779

Source: secalert@redhat.com

http://secunia.com/advisories/22881

Source: secalert@redhat.com

http://secunia.com/advisories/22929

Source: secalert@redhat.com

http://secunia.com/advisories/23139

Source: secalert@redhat.com

http://secunia.com/advisories/23155

Source: secalert@redhat.com

http://secunia.com/advisories/23247

Source: secalert@redhat.com

http://secunia.com/advisories/24606

Source: secalert@redhat.com

http://secunia.com/advisories/25047

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200703-21.xml

Source: secalert@redhat.com

http://securitytracker.com/id?1017152

Source: secalert@redhat.com

http://securitytracker.com/id?1017296

Source: secalert@redhat.com

http://support.avaya.com/elmodocs2/security/ASA-2006-245.htm

Source: secalert@redhat.com

http://www.cisco.com/en/US/products/products_security_response09186a008082c4fe.html

Source: secalert@redhat.com

http://www.cisco.com/warp/public/707/cisco-air-20070425-http.shtml

Source: secalert@redhat.com

http://www.debian.org/security/2006/dsa-1206

Source: secalert@redhat.com

http://www.hardened-php.net/advisory_132006.138.html

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:196

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2006_67_php.html

Source: secalert@redhat.com

http://www.openpkg.com/security/advisories/OpenPKG-SA-2006.028.html

Source: secalert@redhat.com

http://www.php.net/releases/5_2_0.php

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0730.html

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0731.html

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/450431/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/451098/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/453024/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/bid/20879

Source: secalert@redhat.com

http://www.trustix.org/errata/2006/0061/

Source: secalert@redhat.com

http://www.turbolinux.com/security/2006/TLSA-2006-38.txt

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-375-1

Source: secalert@redhat.com

http://www.us-cert.gov/cas/techalerts/TA06-333A.html

Source: secalert@redhat.com

US Government Resource

http://www.vupen.com/english/advisories/2006/4317

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/4749

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2006/4750

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/1546

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/29971

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10240

Source: secalert@redhat.com

ftp://patches.sgi.com/support/free/security/advisories/20061101-01-P (unsafe URL)