Bug 215565 - php5 htmlspecialchars() and htmlentities() functions vulnerable to buffer overflow allowing arbitrary remote code execution
Summary: php5 htmlspecialchars() and htmlentities() functions vulnerable to buffer ove...
Keywords:
Status: CLOSED DUPLICATE of bug 214391
Alias: None
Product: Fedora Legacy
Classification: Retired
Component: php
Version: fc4
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Fedora Legacy Bugs
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2006-11-14 17:22 UTC by Jeff MacDonald
Modified: 2007-04-18 17:53 UTC (History)
0 users

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2006-11-15 07:26:04 UTC
Embargoed:

Attachments (Terms of Use)

Description Jeff MacDonald 2006-11-14 17:22:16 UTC 
Description of problem:

versions of php5 prior to 5.2 have a vulnerability which allows "arbitrary
remote code execution via the htmlspecialchars() and htmlentities() functions to
do assumpmtions regarding the length of a valid htmlentity.

Version-Release number of selected component (if applicable):
php-5.0.4-10.5

How reproducible:


Steps to Reproduce:
1.
2.
3.
  
Actual results:


Expected results:


Additional info:
http://www.hardened-php.net/advisory_132006.138.html
Comment 1 David Eisenstein 2006-11-15 07:26:04 UTC 
This issue is CVE-2006-5465, which is being worked on in Bug #214391.
Thanks for your submission!  :)

*** This bug has been marked as a duplicate of 214391 ***
Note You need to log in before you can comment on or make changes to this bug.