Red Hat Security AdvisoryRHSA-2006:0730
php security update
Released 2006-11-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 php-4.3.2-37.ent, php-4.3.2-37.ent.i386, php-devel-4.3.2-37.ent +11
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 php-4.1.2-2.13, php-4.1.2-2.13.i386, php-4.1.2-2.13.ia64 +14
- Red Hat Enterprise Linux AS version 3 php-4.3.2-37.ent, php-4.3.2-37.ent.i386, php-4.3.2-37.ent.ia64 +25
- Red Hat Enterprise Linux AS version 4 php-4.3.9-3.22, php-4.3.9-3.22.i386, php-4.3.9-3.22.ia64 +47
- Red Hat Enterprise Linux Desktop version 4 php-4.3.9-3.22, php-4.3.9-3.22.i386, php-devel-4.3.9-3.22 +25
- Red Hat Enterprise Linux ES version 2.1 php-4.1.2-2.13, php-4.1.2-2.13.i386, php-devel-4.1.2-2.13.i386 +6
- Red Hat Enterprise Linux ES version 3 php-4.3.2-37.ent, php-4.3.2-37.ent.i386, php-4.3.2-37.ent.ia64 +18
- Red Hat Enterprise Linux ES version 4 php-4.3.9-3.22, php-4.3.9-3.22.i386, php-4.3.9-3.22.ia64 +39
- Red Hat Enterprise Linux WS version 2.1 php-4.1.2-2.13, php-4.1.2-2.13.i386, php-devel-4.1.2-2.13.i386 +6
- Red Hat Enterprise Linux WS version 3 php-4.3.2-37.ent, php-4.3.2-37.ent.i386, php-4.3.2-37.ent.ia64 +18
- Red Hat Enterprise Linux WS version 4 php-4.3.9-3.22, php-4.3.9-3.22.i386, php-4.3.9-3.22.ia64 +39
- Red Hat Linux Advanced Workstation 2.1 php-4.1.2-2.13, php-4.1.2-2.13.ia64, php-devel-4.1.2-2.13.ia64 +6
Fixes 1 record
Priority MEDIUM 45
Buffer overflow in PHP before 5.2.0 allows remote attackers to execute arbitrary code via crafted UTF-8 inputs to the (1) htmlentities or (2) htmlspecialchars functions.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.10307 · Published 2006-11-04 · Fixed
