+++ This bug was initially created as a clone of Bug #213543 +++ Stefan Esser told vendor-sec about a buffer overflow in PHP's htmlentities/htmlspecialchars internal routines. These flaws are triggered when handling utf-8 data. The danger in this flaw is that these functions are usually passed user input. The patch for this issue can be found here: http://cvs.php.net/viewvc.cgi/php-src/ext/standard/html.c?r1=1.111.2.2.2.2&r2=1.111.2.2.2.3 -- Additional comment from bressers on 2006-11-02 13:45 EST -- This issue is public: http://secunia.com/advisories/22653/
An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on the solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHSA-2006-0736.html